The DeFi platform held off on a $1 million reward offer while giving perpetrators a chance to return funds.