A hacker that swindled cross-bridge DeFi Protocol Transit Finance out of $28.9 million has agreed to return $2.74 million to victims.