> To some extent this dynamic must already exist, which is a troubling thought. I've not seen any evidence for this behaviour existing, even with Microsoft Bug

> To some extent this dynamic must already exist, which is a troubling thought. I've not seen any evidence for this behaviour existing, even with Microsoft Bug Bounties of up to $250,000, or even heard of developers being tempted to introduce bugs for friends to find them. I assume the bigger risk is developers intentionally introduce bugs for nefarious purposes (i.e. black market sale), rather than to win a bug bounty.