Hacker News Reader

Weird argument. You're trusting they will pay the bounty if it's a real bug, why not trust they will refund the fee?

Building trust is the hard part, which is why you aggregate all that trust into an entity that everyone else is verifying as trustworthy.

In this case, who is that entity?