Why are we basing the percentage paid on the funds at risk? A ridiculous sentiment. So what we should be spending 10 billion a year to devs to secure Bitcoin Core? Because that's a 2t market cap. He is not a white hat. He is a black hat extortionist.

Consider themselves lucky and move on.

If he’s charging, he’s not a white hat. He’s just trying to frame this as being a white hat. Keeping1 BTC would be more than adequate, but even that is stealing.