[doopy1]

I don't think Zerodium payouts are lump sum... I believe they are staggered in order to mitigate against this stuff.

[tptacek]

So far as I know, essentially all grey market vulnerability sales are tranched, which is an important consideration when comparing bounty payouts to the grey market.