The "Whitehat? Bullshit, that's stealing" natural response isn't really justified.
If you see this bug and you don't want every user to lose their money, you are somewhat ethically bound to confiscat...
It works for Israel, if they think you will have a nuke in the next few decades you are fair game to receive a good bombing. White hats will take the sats and get to make their own reward