So you could have two hackers who each tip each other off to companies that they have independently hacked. They can just claim each other's rewards since they had nothing to do with the actual attack?