If you really care about Backed Finance investors and want to prevent them from losing the money, why don't you provide the evidence right now, instead of waiting for them to reply?

Or are you maybe one of those bug hunters that are spamming projects with your vulnerability report and then asking for payment?