BattleChain fixes this.
Bug bounties: "find a vuln, write a report, we'll pay you (maybe)."
BattleChain: "find a vuln, exploit it, keep 10%, return the rest."
You stole the money. You sent it to the recovery address. You keep your cut.
No politics.
No discretionary payouts.
On-chain Safe Harbor agreements make it legal.