The Curve bounty sits at 10% of the stolen funds, roughly $1.85 million, and was announced via an on-chain Ethereum message.
