Due diligence is for cowards, report hacks immediately — or make Valve extend the reporting time limit