If exchange itself hosts a bug bounty program, then the number of hackers is limited to people using the services of this exchange. Listing on a bug bounty platform attracts a much larger number of professional hackers to test the exchange.