The Verus Bridge exploiter has returned $8.5 million of the stolen funds while retaining $2.8 million as a bounty reward after a 24-hour ultimatum from Verus. This incident highlights ongoing security challenges in the crypto space and the potential for negotiated resolutions in such cases.