The bounty payouts must be public in order to serve as an incentive.

That incentive works both ways. For instance employee sneaking in a security hole and then selling it to a mate so they can collect the bounty.

[deleted]