Crypto has auto-catalyzing bug bounties with no limits.

If there's a bug in your system and it's deployed, then people in the ecosystem will take advantage of it, with no limit.

In some ways this is confidence-inspiring; if it's not happening even for heavily used components, that's a good sign the component is reasonably resilient.

But it also makes it extremely hard to ship any new features; each new feature has to be rigorously tested for bugs before it is rolled out in the wild.

Another reason crypto is such a challenging environment to operate in!