A whitehat discovered the exploit and drained the funds themselves to return them safely to users.

Whitehat hackers in crypto operate in a grey zone, often facing legal uncertainty despite clearly beneficial intentions.