The attacker behind the July 30 Curve Finance attack has returned $8.9 million of drained funds, claiming they don’t want to “ruin” the protocols they exploited.