I assume they stole just anything they got. I'd assume any attacker would at least transfer everything to a BTC/whatever address generated offline, then figure

I assume they stole just anything they got. I'd assume any attacker would at least transfer everything to a BTC/whatever address generated offline, then figure out later how to launder it.