On-chain activity suggests that the hacker has sent at least 225 BTC ($4.5 million) to OKX so far.