A week after losing millions to an 'address poisoning' scam, over half of the funds have been returned to the victim’s Ethereum address.