On-chain data shows that four projects affected in the attack received the stolen tokens over the weekend.