The Penpie protocol hacker funneled $7 million through Tornado Cash hours after stealing $27 million, highlighting DeFi security risks.