Anything is possible, but it gets much harder once the money is in circulation. If the hacker has time to buy socks & soap with the stolen funds, and convert so

Anything is possible, but it gets much harder once the money is in circulation. If the hacker has time to buy socks & soap with the stolen funds, and convert some of it to USD on an exchange - then the soap merchant and exchange will not want their wallets "corrected". Sorting out who should get their money returned and who gets to keep it would be infeasible.