Security engineer admits to crypto hacks, agrees to return $12.3M and pay $5M to victims, facing up to 5 years in prison.