Obfuscated Open Source Subtle Bug Insertion Contest

Edit: If it's not a bug bounty to fix it, but a vuln bounty to sell it, then it's highly-unethical but not necessarily illegal.