Isn't this the bitcoin that is owned by Liquid as collateral? No need to deal with customers directly, just find a way to return the collateral safely so that peg outs can work again no? To be fair, I don't really know how the sidechain works so this is really me probing to learn more.

Taking 598 btc in exchange for finding the exploit isn't exactly "whitehat" behavior.