Prisma Finance says $540K still at risk, hacker demands team reveal themselves