Penpie is negotiating a bounty with the hacker, offering immunity and anonymity if they return the stolen funds.