An important message for the exploiter:
We are offering a 10% bounty of any funds stolen, which are yours to keep if you return the remaining 90%. You made an opsec mistake, but it’s not too late to avoid escalating the situation. For taking this chance, contact us through texturebugbounty@proton.me
If you do not reach out by 11 July at 18:00 UTC or if you move stolen funds, we will consider you a blackhat, and forward the collected information to law enforcement agencies in your country.