The hacker has clawed back $4.8M of losses, six months after draining UXLINK’s multi-sig and minting a billion tokens.