It could be said that a non-zero percentage of bug bounty hackers are not actually white hats, but rather blackhats with poor connections or limited ability to fence their vulnerability.