A second wallet borrowed another roughly $1 million but identified itself as a white hat hacker and said the funds would be returned.