Othe is right that BCX deserves no attention or respect, and certainly not payments or deals.
If he finds previously unknown exploits and hands them over then surely he deserves a bounty. I'll put 0.25 BTC to the bounty as well.
For every exploit you find that the dev team confirms, I'll pay you .25 BTC
I'll match it.