The decision by Cetus to pause smart contracts during the $260 million hack was intended to protect user funds and initiate a responsible recovery process, including offering a whitehat agreement to the hacker.