Report immediately to the administrator.
Do not transfer the money but steal the bitcoins.
Do not report it and continue the penetration test.
Transfer money from the administrator’s account to another account.
OR Report individual vulnerabilities immediately, but advise thaat
system wide action shoud await a more robust stage of findings