Should this qualify for a bug bounty prize?