As far as I understand it, all the XCP the white hat withdrew from Poloniex will be returned via the current Patch 0.61, only the BTC he withdrew remain in his honest (?) hands. Lets make that bounty worth his while. Also holding on to the XCP wouldnt make too much sense right now because the price will probably dive in the short-medium term.