Please report security issues to Andrew Culver privately via DM on Twitter or via DM after joining the Bullet Train Discord server. (Please double check the profile you're messaging is marked as the "Server Owner".) If you don't have a reply within two business days, please contact Adam Pallozzi and Gabriel Zayas via DM on Twitter only. We do not currently have a bounty program.