The attacker behind the September 6 Liquid Network exploit returned 3,400 BTC on September 7, 2026, after identifying as a white-hat team, leaving approximately 600 BTC outstanding