# kaal:claim:4734750-005

**Claim.** Bug bounty programs are structurally compromised by their reliance on a trusted intermediary that extracts high commission fees and may hold interests that conflict with the software vendor.

**Type.** failure  **Support.** argued

**Holds when.**

- intermediated bug bounty platforms

**Source quote.**

> they use a trusted intermediary that charges hefty commission fees and may have a conflict of interest with the software vendor

**From.** Wulf A. Kaal, *Code Review DAO* (2024), Community Audits, page 9

**Cite as.** Wulf A. Kaal, Code Review DAO (2024). SSRN: https://ssrn.com/abstract=4734750

**Verify.** sha256 of source PDF `60eadf91c0913468505afc664c8d8d1e1673d6c5326d031ca7060addb8ab2eda` at https://raw.githubusercontent.com/wulfkaal/Academic-Papers/main/papers/pdf/Kaal%20-%202024%20-%20Code%20Review%20DAO.pdf

**Failure mode.** Intermediary capture of bounty programs  (family: recentralization-drift)

**Topics.** institutional-design

**Keywords.** bug-bounties, intermediaries, conflict-of-interest, commission-fees

**Canonical form.** This markdown file is the canonical hashed representation of the claim. Its sha256 is the content hash used for attestation.