Simple! When a bug is found, someone (or even everyone) involved with the contract loses their money. It's one of the many downsides to handing control of your cash over to an irreversible computer program.