Word on the street is that there is more to it. There is an additional vulnerability related to Validators, and that is the item the bounty is about.

Feel free to ask Louis about it.

Paying 5k for it is nonsense

Appreciate the comment.