Curve Finance offers an open 10% bounty as the exploiter fails to return stolen assets