Who paid for it, and who found it
Cred
Cred is what a person's GNOT paid for once the work was judged: honest reviews and real holes found. Money that came back unspent earns none. Everything behind every number here is on the record; follow the links down to each coin.
Nothing in this version stops someone from backing their own target, filing junk through a second account and accepting it. What keeps that from mattering is that it is all public: who backed what, who filed what, which verdict each report got, and, once a round is disclosed, every report itself.
Backers
No backer's GNOT has paid for judged work yet.
Volunteers
By the holes they found, the worst first, then by accepted reviews.
No volunteer's review has been judged yet.