I think it depends on how you look at it. If your treated it as a job where you're trying to make a living from bounties then I think it is hard to do that, but

I think it depends on how you look at it. If your treated it as a job where you're trying to make a living from bounties then I think it is hard to do that, but if you do it as a side project or you happen to stumble on an issue then 5k or whatever is a nice bonus for reporting the issue responsibly.