XLink faced a security breach involving almost $10 million, with $4.3 million recovered thanks to a friendly neighborhood whitehat hacker.