"We developed the bug bounty program to encourage and award community members who identify unknown bugs in the software," said Chris Hofmann, director of engineering for the Mozilla Foundation. "This program is one of the many ways the Mozilla Foundation produces safe and secure software for its users."
http://news.zdnet.com/2100-1009_22-5...=zdfd.newsfeed

That's a pretty good ROI for Mozilla.