The rollback reversed legitimate activity alongside the attack, while $9.19 million remains unrecovered, according to Cronos.