The GMX hacker actually returned the money and then withdrew the remaining white-hat funds. Something seems off; most hackers don't return the money at all. Is this embezzlement? Or contract manipulation?