The hacker used social engineering techniques to gain access to the wallet and then began washing through 300+ addresses, 20 exchanges and mixers. Some of the funds were transferred through Monero, which almost eliminates the possibility of tracking.
Experts are not sure who was behind the attack, but the scheme was carefully planned and automated. The complexity of the process and the speed of laundering make refunds unlikely.