I offer that anyone who did the work that these researchers did would have also been “rightful owners” of that money.<p>This is the consequence of programmable money; there’s no getting around it, and, in my opinion, people shouldn’t want to. Rescuing people and brands who don’t put the effort into security from the consequences of their own mistakes isn’t a net benefit.<p>I'm all for anonymous teams, but look at the hoops this person had to jump through just to get in touch with them to report the bug.<p>When you're anonymous, all you have is your brand, and theirs should have burned to the ground for this entirely preventable error.