there isn't any reason why bug bounties have to all go to the mothership. you're (for lack of a better word) kickstarting a bug fix. it's a bounty. it should go to the person who delivers the fix, the bounty hunter.