After returning the FRAX, the GMX hacker started returning ETH: 10 minutes ago the hacker transferred 3000 ETH back to the multi-signature address of the security committee mentioned by the GMX team.