Originally posted by Docrwm
Cheap to pay him and VERY costly not to. Whoever made the decision should be looking for work now.
Absolutely. If the guy was good enough to inform PayPal then that's kudos to him - and likely offers of further work from other financial institutions. If PayPal won't pay him then that's seriously bad form from PayPal. They say "So many brands, so little fuss". Perhaps it should read "So many bugs, so little testing".
Get real, PayPal - that 'child' has behaved like a true, honest adult. The very least you can do is treat him like one and PAY HIM the bounty.