Don't get it. Why would any hacker steal coins and leave them sat in the same account for months, just to hand them back for a percentage of the stolen coin? In those months, those stolen coins could have been sent through numerous addresses, coin mixers, exchanged etc.. making it very difficult to trace. Smells like a scam to hide a scam.