Okay so apparently if people don't reap benefits, or are able to do what you did a couple days before you say anything, it must not exist and be complete bullshit.

My Story:

I recently reported a bug via a bitcoin dice website, which I will not disclose without consent of the owner, and was able to log in, and bet on their account essentially without being actually knowing of their address, or password which is done by the cookie that is unencrypted, and the server never checks to verify the cookie. It only assumed the cookie was a success

Exmaple: UserID 235523 was sucessfully loggedin from address: F123DAFDAv09c8vasf, and UserID is changed to 4324, and the server when refreshed with that cookie stored passes it by and lets you set up on the account 4324... Recently reporting it earned me a little amount of bitcoin, which could have been more but no matter :-)

The exploit allowed me to:

-Bet Under the User
-Cash Out (To the User's address which was smart by the owner not to have the address be part of a cookie, or address changeable by the user)
-Change the Password of the user

Now how do I know that betting worked?

A- The Live Stream (Bets are shown) clearly showed "User:XXXXX" Bet : xXXXXXXXX, and I saw the balance after I bet which cleared to be in check
B- The balance was, as stated in the statement above cleared to be check

So I ask, what happened to the trust anymore?
If something doesn't go your way, and sounds too "Good" to be true, or you never did it before yourself, it's complete bullshit?

Part of me wants to quit Bitcoin because of the immaturity, but part of me stats for the anonymity