A hacker who exploited a governance vulnerability in the DeFi protocol Term Labs over the weekend has begun moving stolen funds through crypto.