Curve Finance, a DeFi protocol, is offering a bug bounty for anyone capable of identifying the individual responsible for draining over $61 million from its pools on July 30. The reward is 10% of the remaining exploited funds, currently valued at $1.85 million, and will only be issued if the exploiter is successfully convicted in court. While some funds have been returned, the attacker left a message suggesting they did not return them out of fear of being identified. The incident raised concerns about the security of DeFi protocols, particularly those with Wrapped Ether.