A rapidly rising secondary market for zero-day vulnerabilities and improved software coding practices are combining to reduce the number of submissions to the HP TippingPoint Zero-Day Initiative, according to a vulnerability researcher who is overseeing the bug bounty program.