> Not unless the bounties are large enough to attract the attention of a hedge fund. Which they should be if the alternative is a much larger loss to the compa

> Not unless the bounties are large enough to attract the attention of a hedge fund. Which they should be if the alternative is a much larger loss to the company's share value. The shareholders come out ahead to pay five million on a bug bounty if the alternative is to lose a billion dollars in market cap.