Returning the money elevates the hacker to "hero" status within the crypto community. By keeping the funds they risk getting doxxed and having serious legal action taken against them. Additionally, if the funds are a sizeable portion the entire project might fail rendering their token useless.