I guess the Treasury Department could stop transferring funds into DoD accounts, but that seems unlikely.
Perhaps he could be prosecuted for violating various laws, but that would require action by the DoJ, which also seems unlikely.
Congress could also hold Trump responsible for Hegseth's actions, but that also strikes me as unlikely.
The past 9 years have been a really good education in why the Separation of Powers is important, and what's at risk when it doesn't function properly.