We are looking into creating a bounty program for critical bugs and vulnerabilities. We hope to make an announcement soon.