Circle and Tether are being questioned by DeFi risk management company LlamaRisk because their bug bounty programs are "seriously inadequate," with the highest amount not exceeding $10,000.