The attacker started returning stolen funds after accepting nearly $7 million in bug bounty. Funds had been returned to Alchemix and JPEGd.
Source: https://cointelegraph.com/news/alchemix-reports-return-of-all-stolen-funds-from-curve-pools
Alchemix reports return of all stolen funds from Curve pools
August 6, 2023
CoinTelegraph