Defrost attacker returns stolen funds amid ‘rug pull’ accusations