They just put out a comment about following the Blockchain as authoritative, however it came to the conclusion to do that. I can follow that reasoning, which is also why the correct response to one person getting the power to do a full 51% attack every single time like Justin Sun got is "run away as fast as you can". That said, seeing this response I think this can go several ways.

• Justin Sun can make a convincing case for hacking and theft which will "return" the funds to him. This would however strictly identify him as behind the specific account and he will carry the blame he is trying to avoid.
• The funds will be returned to the account, which is in the hands of our White Knight and who can make decisions following this action. This would also legitimize their position to actually return the funds.
• Bittrex will say thanks, I will keep this. That would be very stupid and fully destroy their reputation
• The funds will actually be returned to their original owners. This can still be framed as not admitting theft by the hardfork if the legitimacy of the sending to bittrex is stated.

None of these seem very probable to me tbh seeing their current statement. I think as such probably the funds will be locked at Bittrex for some time until a formal narrative has been made up that law enforcement agrees with about actions that occurred, which might very well be what the White Knight is after: a public statement about the nature of the actions.