According to ChainCatcher, on-chain analyst Ember monitored that the phishing gang has returned 3,764 ETH to the victim's address, equivalent to $11.42 million, and the refund is still in progress. The phishing gang exchanged the 1,155 WBTC they caught for 22,960 ETH, which was then distributed to hundreds of wallets.