are there incentives where the credit for "discovering" a CVE is greater than the reputational consequences of reporting a false one? This situation gives repr

are there incentives where the credit for "discovering" a CVE is greater than the reputational consequences of reporting a false one? This situation gives reproducability-crisis vibes, where people are submitting junk research for some external reward. security is particularly vulnerable to garbage research, and this is a recipe for fraud. perhaps the hacker mindset is earnest and quaint compared to the layered deceptions of academic dishonesty.