GMX has offered the attacker a 10% "white-hat" bounty after some $40 million worth of assets were swiped from the crypto protocol.