A portion of the stolen funds were routed through privacy exchange Railgun but were frozen in coordination with virtual asset service providers.