[xg15]

Putting on my tinfoil hat, I wonder if some of that slop might be coming from actual black-hat groups or state actors - who have an interest in making it harder to find and close real exploits.

Those people wouldn't care about the bounty, overwhelming the system would be the point.

[Applejinx]

I think those people are busier overwhelming other, bigger systems right now, but it's a fair point. I daresay when you get down to a real salt-the-earth destroy-everything point, open source projects can expect destruction by the same people.

To say nothing of the uses of real exploits: that's salient.