It would be nice to see what terms would be if not claimed, specifically, if not claimed in X days (how about 28 since there could be little claim of protecting an exploit at that point) will the money go to the charity you mention?
I ask because I think that would incentive a few more people bumping the bounty.
I ask because I think that would incentive a few more people bumping the bounty.