Security Incentives
summary
Describes a concrete model: launch large on‑chain bounties through a platform that paid roughly $4M to $50M+ in recent years, drives live disclosures, and funnels about $50M allocated to finders while claiming 100–1000x ROI on prevented losses. Notes limits: programs are costly, noisy (gold‑panning of reports), and require escrowed payouts and clear contracts. Predicts growth to billions by 2025 and argues the approach measurably raises demand for audits, monitoring, and insurance.
AI-written summary · about
chapters (7)
- 0:00Security incentives intro
- 1:27Bug bounties primer
- 6:17Bug bounty history
- 9:48Bug bounty growth
- 13:58Drivers for adoption
- 16:43Security career outlook
- 18:10Call to action
related talks
30mBeyond Quick Cash: Rethinking Bug Bounties for...
50mTo bounty, or not to bounty? Security@ insights from 500 organizations
29mAPI Security Risk Management with Bug Bounties
45m2014.10.29 - Security@Scale - Katie Moussoris, HackerOne
56mBounties and the SDLC
18mDAOnizing Web3 Security
44mOpening Keynote: Prove It! Confronting Security With Data.
46mThe State of Blockchain Security - 2023 Edition
