[jwr]

I don't understand why companies start those bug bounties and later try to avoid paying out the rewards. If it were me, I'd book the reward amount as "spent" the minute I decided on a bug bounty hunt.

I think this is (yet another) lesson that participating in these kinds of bounty hunts is very risky and should only be done if the company is reputable (which this one apparently is not).

[DougBTX]

How is this not reputable? They are pretty clear about when they will not sue people trying to hack their systems, a bounty is a bonus.