Crema hackers retain $1.6M after giving back $8M in protocol