CoinVoice recently learned that Jason Brink, the former president of Gala, said in a tweet that the GALA attackers are suspected to have returned the stolen ETH. The on-chain records show that the hacker address starting with 0xe2 transferred 5913 ETH to the address starting with 0xEC at 20:43, which is the address with GALA contract management authority that was hacked by GALA. [Original link]