According to Etherscan data, the attacker address marked as "Alchemix/CurveFinance Exploiter" on the chain once again returned 1,000 ETH to the "Alchemix Finance: Dev Multisig" address.