2 ms·

Uhm, but weren’t they operating via a bug bounty program? Now they’re supposed to be a registered auditor or whatnot?