The token bridge project said it wouldn’t take legal action against white hat hackers who return the funds.