Platforms are capping bug bounty rewards to cut costs, creating dangerous incentives that could lead to billion-dollar crypto hacks instead of disclosures.