Seventeen million tokens were returned, 1M sent to Vitalik Buterin is "being recovered." The rest? Bounty for the hacker, says Optimism Foundation.