Your issue appears to be with bounties arising from a security vulns, which is a special class of bug that should be treated with a much higher degree of care.

Your issue appears to be with bounties arising from a security vulns, which is a special class of bug that should be treated with a much higher degree of care. The bugs expressed in this post, such as the duplicate account creation one, are not going to impact a company's bottom or top lines, so it is questionable whether it warrants a small merit award which is the idea that spawned this thread.