@bagder I did not follow this very closely, but my optimistic approach would that that the AI bots still come in because they did not yet find the information that the bug bounty was discontinued. Maybe it some humans need to remove it from a list of go to repositories?