Well, too late to know for that guy, he's already been arrested[0]. Guys on Solidot[1] digged out many interesting things, including one issue he posted on one of he's own GitHub repo saying "Help! How can I delete this repo, I have to run!".
LOL
BUT, I almost feel pity for him. Take look the picture of him on the news[0], look the environment he's living in and how thin he is, pretty rough life I'd say.
I hope hes doing well in prison and become a better man after this. If he can write a virus capable of doing all that, then I think he will also doing well in most companies that does web related works.
The WeChat account already been banned. http://www.xinhuanet.com/fortune/2018-12/05/c_1123807970.htm
Now it's time for the police to dig out the real criminal.
A proxy/jumper account might work until (as you said) somebody starting to cash the money out.
Seems a very dumb thief, but again, how do somebody steal money online without been caught now days?