Over $200 million worth of users’ funds could have been at risk if the whitehat chose to exploit the vulnerability for personal gain instead of reporting it to developers.