Bug bounty isn’t dead, but the old model is breaking

This article analyzes how AI-driven increases in low-quality and high-volume bug bounty submissions are overwhelming maintainers and prompting major programs (e.g., Internet Bug Bounty, curl, Node.js) to pause or change payouts, arguing the bug bounty model must evolve toward disclosure-as-expected, more targeted rewards, and improved triage to remain sustainable.