According to Foresight News, CertiK monitoring showed that the Nomad attacker transferred 45 million DAI to a new address and exchanged it for ETH.