Security bounties seem to work well. e.g. https://www.hackerone.com/
This is cool but I'm thinking more crypto native
I like bugcrowd more, used to make my first USD as a 15 year old there