I'd hate to be the one writing / negotiating that contract. What happens if the company pulls the feature? What if the code introduces a vulnerability that lea

I'd hate to be the one writing / negotiating that contract. What happens if the company pulls the feature? What if the code introduces a vulnerability that leaks data? How much of the pie does the code reviewer get when he finds that bug?