Projects need to improve their treatment of white hats and be more responsible with user funds at risk.