Hacker still has access just withdrew another $8M