Gotta hand it to them, this is the right shape of a response - bounties public, timeline promised, cold storage reminder. The part worth auditing now is how hundreds of claimed findings still let the real one through. Paying researchers is good, fixing the pipeline that missed the actual exploit is better.
Gotta hand it to them, this is the right shape of a response - bounties public, timeline promised, cold storage reminder. The part worth auditing now is how hundreds of claimed findings still let the real one through. Paying researchers is good, fixing the pipeline that missed the actual exploit is better.