HackerOne: Race condition leads to duplicate payouts

@jigarthakkar39 discovered a race condition issue with some recent changes to our payments code that caused him to be able to receive duplicate payouts for some bounties. A number of variables and timing had to be just right for it to actually allow a malicious actor to exploit this and receive...