Comment by Kalium

From the Medium post:

> - Offered and declined a financial bounty for the report due to policy on not being able to publicly disclose even after the vulnerability was patched.