The hackers could be using these small transfers to test whether trading platforms will immediately freeze funds sent from an address known to be associated with the theft. (cryptotimes.news)
The lender keeps that money as collateral and freezes those funds until your loan is paid off. (lendedu.com)
Not only that, but the banks were also required to immediately freeze the funds and were prohibited from completing the transaction. (remonline.com)