Curve JPEG'd hacker returns all funds; test transaction indicates alETH hacker may be next