Most of the funds drained from a U.S. government crypto wallet in an apparent attack Thursday were sent back early Friday.