A phishing attack targeting 50 million USDT left a message for the hacker: a $1 million white-hat bounty would be offered if the funds were returned within 48 hours.