It wasn't a hack us contest, just a bug bounty that applied to a limited number of domains (not including whatever site the dropbox password went to). That's what I remember, anyway.