The proposal lets the attacker keep 30.652 ETH, about 10% of confirmed proceeds, if the funds are returned to a Cysic Foundation address.