> find a high bug in a project > security .md immunfi link dead > docs go to a bug bounty at second program which is "on hold" chat I think I'm cooked

(I did ethically disclose still, no bounty obviously)

for context for non security people: in order to get kicked off of two bug bounty platforms you have to be pretty criminal about never paying for valid bugs