Data sourced from Etherscan indicates that the exploiter first swapped 95,360 ETH worth roughly $157 million on DeFi Aggregator OpenOcean and then transacted smaller amounts capital through several decentralized finance (DeFi) protocols such as Kyber Network and 1Inch.