Blockchain security firm Cyvers confirmed the stolen funds were initially bridged to Ethereum and funneled through the privacy protocol Railgun.