It's important to point out that no actual theft of assets occurred here. The big $5,000,000 number boils down to some Korean dudes spoofing their credentials to get a job, and... that's the money they got paid to do their jobs. That's not theft—that's the same thing thousands of Americans do every day to juke their way into bullshit remote IT jobs. This is only newsworthy because the perfidious oriental enemy combatants did it, and there's only "damages" because now they have to harden their cyber-defenses against the sinister specter of communism.
The $900,000 "crypto" "theft" is just some crypto-bro grifters getting out-grifted. Haw haw!
"I was just being stupid on purpose! To troll you, and also help you!"
Okay bud.