A moral debate exists on whether white hat hackers should preemptively sweep funds from vulnerable addresses to protect users