This probably gets solved outside of the level of an individual project. No small team can handle this without building a whole product just to handle the bug bounty.