Bug Bounty
A standing reward for researchers who responsibly disclose vulnerabilities.
Bug bounties give security researchers a legal, well-paid alternative to exploiting what they find. Large protocols post ceilings running into millions of dollars for critical findings.
The economics only work if the bounty is competitive with what an attacker could extract, which is why the biggest programmes scale payouts to the value at risk.