Decentralized finance (DeFi) protocol Curve Finance (CRV) has offered a $1.85 million public bounty to recover the remaining funds stolen on its platform through a reentrancy bug on July 30.

In an on-chain message dated Aug. 6, Curve conveyed that the deadline for the hacker to voluntarily return the stolen funds had passed at 08:00 UTC on that day, with no funds returned.

Consequently, the protocol revealed it was giving the public a chance to identify the exploiter in a way that could lead to a conviction in the courts. However, the protocol offered not to pursue this path if the hacker chooses to return the funds.

On July 30, several DeFi platforms were exploited via a reentrancy attack after multiple versions of Vyper, a smart contract language for the Ethereum virtual machine …