As maintainer what is keeping me from using this as a replacement for bug bounty platforms like hackerone, is the missing payout functionality. this is quite hard to do if you serve bounties worldwide (lets say researcher is in Indonesia, while my OSS company is in US) without significant bureaucracy and admin overhead.
Anyone know a solution to this that does not involve commercial bug bounty platforms or something something crypto?