Do you pay for a bug hunt and - or - exploit find?
Nope, we are not paying for that. But of course always glad to get any feedback of what could be changed/fixed.
Are you sure about that?
He's asking whether you pay a bounty for discovered exploits. If you don't, people will be much more likely to use the exploits or sell them so someone who will.
If I found a way of winning every time I play, would you really not pay a reward for me reporting it rather than exploiting it?