You still don't seem to understand that the people capable of attacking it won't do it until there is enough value to extract out of attacking it. I already explained several times that $2100 in VNL is not a bounty because after one successfully attacks it, the VNL will very likely decline in value before the person gets paid the bounty and can convert it to BTC. And it is not high enough any way. It will require some resources, time, and skills to work out and launch such an attack. Personally I am not interested.
Sorry but I still don't get this argument. There are several companies that offer $1,000-$5,000 bug and exploit bounties for Bitcoin. However you are under the assumption any bug found in vanillacoin means the coin is permanently dead, which is like saying BTC is dead if I find an exploit. Which btw if someone DOES find a Bitcoin exploit, what incentive is there for them to come forward either when they can profit more of it then reporting it?