I think a simple link to paypal invoicing in the hackers profile should be enough, and eliminate the need for central governance in the legal sense. A referal to this in the bugtracker or forum response is all that's needed. It's a simple job exchange. Any VAT issues are subject to local law between payee and service provider/hacker.
Cheers
Ben
