has anyone checked to see if this money has already spread to downstream addresses? It's possible the damage is already done and exchanges have accepted money from the poisoned address.
Unless the address in question was an Exchange deposit address. In that case hacker has purchased $30mm worth of Bitcoins in a matter of hours and moved them out immediately without needing to move Tether anywhere.