This comes less than a week after an $80 million exploit involving Qubit finance (https://web3isgoinggreat.com?id=2022-01-30-1), which is now begging whoever did it to "be a white hat" (https://twitter.com/QubitFin/status/1488809058526064640) while telling customers its "willingness to compensate." (https://twitter.com/QubitFin/status/1488339036448391168)

My questions are: Are the majority of victims in both exploits ordinary small-scale traders, investors in the companies that operate/promote these services and protocols, or other entities?

Is there any realistic hope to make the victims whole without the cooperation of the people responsible for the exploits?