CrossCurve has announced that a smart contract vulnerability has resulted in funds being transferred to ten different addresses. The company is offering a 10% bounty to non-malicious holders who return the remaining funds to the address starting with 0x624E. Holders have 72 hours to comply or contact CrossCurve, after which legal actions will be initiated against those deemed malicious. These actions include criminal complaints, civil lawsuits, asset freezes in collaboration with exchanges and Circle, and the public disclosure of addresses and analysis results.