I still think it is cringe how small these bounties are. If I was running a DeFi app I would be offering atleast 20% of market cap or 10% of TVL (whichever is smaller) as a bounty for critical vulns. This means Uniswap should be offering atleast $100M for their Uniswap v4 bounty for example, as opposed to the $15M they currently offer.
Some people are white hats out of principle, and for them even smaller bounties will do. For grey and black hats, my guess is this is the price point at which they will actually consider reporting the bug instead of just stealing all your funds.
Subscribe
To subscribe, enter "Subscribe " followed by Signal username, email address or whatsapp phone number. You will receive atmost one update per month.
Alternatively, you can subscribe via RSS, or a third-party service like blogtrottr