Bug Bounty, 2 years in