I bet that once the encrypted communications between Blockstream and the "White Hat" Hacker are made public, it will be revealed that the hacker attempted to notify Blockstream of the vulnerability but they wouldn't meet his price for full disclosure and he was met with the hubris that they've consistently shown toward plebs. So the hacker who tried to do the right thing, though expensively, proved the vulnerability and kept his market price. If this does turn out to be what happened, I still believe the hacker is a thief. Morality does not have a price tag.