{
 "@context": "https://schema.org",
 "@type": "Claim",
 "@id": "https://wulfkaal.github.io/claims/4734750-004",
 "identifier": "kaal:claim:4734750-004",
 "text": "Bug bounty programs fail at their own premise because the hackers they pay to demonstrate exploitability frequently sell or exploit the bugs they find instead of disclosing them.",
 "author": {
  "@type": "Person",
  "name": "Wulf A. Kaal",
  "identifier": "https://orcid.org/0009-0008-7840-1847"
 },
 "citation": "Wulf A. Kaal, Code Review DAO (2024). SSRN: https://ssrn.com/abstract=4734750",
 "isBasedOn": {
  "@type": "ScholarlyArticle",
  "name": "Code Review DAO",
  "datePublished": "2024",
  "url": "https://ssrn.com/abstract=4734750",
  "sha256": "60eadf91c0913468505afc664c8d8d1e1673d6c5326d031ca7060addb8ab2eda",
  "encoding": "https://raw.githubusercontent.com/wulfkaal/Academic-Papers/main/papers/pdf/Kaal%20-%202024%20-%20Code%20Review%20DAO.pdf"
 },
 "keywords": [
  "compliance",
  "ai-and-agents",
  "risk-and-incentives",
  "smart-contracts",
  "consensus-and-security"
 ],
 "about": [
  "bug-bounties",
  "community-audit",
  "incentive-misalignment",
  "smart-contract-security"
 ],
 "abstract": "Alas, hackers often sell the bug or exploit them when they discover them.",
 "additionalProperty": [
  {
   "@type": "PropertyValue",
   "name": "claim_type",
   "value": "failure"
  },
  {
   "@type": "PropertyValue",
   "name": "confidence",
   "value": "argued"
  },
  {
   "@type": "PropertyValue",
   "name": "scope_conditions",
   "value": [
    "community audit and bug bounty programs for smart contracts"
   ]
  },
  {
   "@type": "PropertyValue",
   "name": "is_failure_mode",
   "value": true
  },
  {
   "@type": "PropertyValue",
   "name": "attestations",
   "value": "https://wulfkaal.github.io/colloquium/attestations/f4e6d4e882b698b469ed35fda0b8c32f6a2345f3175fe02bf117fe47553b13fd.json"
  },
  {
   "@type": "PropertyValue",
   "name": "edges",
   "value": []
  }
 ],
 "isPartOf": {
  "@id": "https://wulfkaal.github.io/claims/index.json"
 },
 "dateModified": "2026-07-27",
 "version": "1.0",
 "sha256": "f4e6d4e882b698b469ed35fda0b8c32f6a2345f3175fe02bf117fe47553b13fd",
 "canonicalForm": "https://wulfkaal.github.io/claims/4734750-004.md"
}