Liquid exploit actors returned 3,400 BTC to the federation wallet after Blockstream confirmed patched bridge nodes, leaving about 598.5 BTC outstanding.