Your logic is sound. I agree with the GP post about the increased value, though not for his same reasoning. Fixing this bug before an exploit is worth a LOT to

Your logic is sound. I agree with the GP post about the increased value, though not for his same reasoning. Fixing this bug before an exploit is worth a LOT to the company. I think they have a moral obligation to pay more than 1k to fix it. I also think it makes sense to award good-sized bounties, as at this point I would have no interest in their bounty program, were I hunting bounties.