I wonder if Virtuals Protocol considered to use their governance forum (https://gov.virtuals.io/) to decide upon bounties? I can imagine the community wants to reward way more than 10k for these sort of bugs.