The act of white hat hacking to sweep vulnerable funds is considered an ethically gray area