After the Platypus protocol was hacked yesterday, at least 2.4 million USDC was returned to the exploited platform with help from blockchain security firm BlockSec.

Of the almost $9.1 million in stolen funds from Platypus, it was revealed that the attacker could only cash out $270,000, according to MetalSleuth, a visualization tool from Blocksec.

Some $8.5 million of stolen funds are frozen in the contract they were transferred to, and another $380,000 from a second attempted exploit were accidentally sent back to Aave, on-chain data show.