Wait - I'm seeing several things here... Ok I read all the articles and comments... that took too much of my time.
Some thoughts before bed...
A. why in God's name DIDN'T we have a bounty for something like that? Why didn't anyone do pen tests? Why is AI so easily able to trash Hive Security and if it's THAT EASY... why must Splinterlands stick with it?
B. With those questions asked... we must all see that a Bounty for something like this is critical and whomever handled the prior situation with an aloof attitude...
Is that really the kind of mindset we can expect going forward? Big yikes if so.
C. Current and Future Bounty Sizing suggestions:
Current - I've seen hours/weeks etc and estimates come up to $2-3k... but then I see there were 1.2BN $SPS Tokens Vulnerable and that math came out to be like $4.8M USD...
So... $5,000 would be a .1% Bounty. Why does that seem so outlandish?
Furthermore, from all the harsh talk from AZ (shocking) about lawsuits and whatever it seems like AZ didn't like the manner in which this was done. However, a few weeks prior there was yet another vulnerability brought up where Louis was basically ignored and given $10...
You know what I am getting from all this... nothing positive. It seems a person who tried to do some "good" for the community was shunned perhaps unprofessionally... and then found a MASSIVE Exploit to which they said "Hey bros - I did you a HUGE favor here..." and asked for a POINT ONE PERCENT Fee as a Bounty Reward.
Here's where I stand with my meager vote and largely ignored voice:
Splinterlands can take a $5k Hit and survive - and we should be GRATEFUL for the help...
Splinterlands CAN'T take a $4.8M Hit and survive.
$4.8k would be my vote 
Perhaps there should be Tiered Bounties - I mean I report GUI Bugs all the time and never expect anything because they're just annoying...
Serious Security Issues SHOULD Reward White-Hats because then they're incentivized to beat the shit out of the Security and small-ish bounties can protect VERY LARGE AMOUNTS OF ASSESTS...
$0 In Game Bug Bounty - Tier 0 = Glint + Card Rewards?
$0-$500 Tier 1
$501-$2,500 Tier 2
$2,501-$5,000 Tier 3
$5,001+ = Tier 4 = .1% Of Possible Loss.
You guys throw in some input on Tiers 1-3.
I'll still report my issues and annoyances without expecting anything... and many of them eventually got fixed ( tons of people appreciate the "Pull Down & Hold to Refresh" after Battle Screen on the Mobile App).
RE: SPS Governance Proposal - Pay Bug Bounty to louis88