Nice write-up man, can you point me to their bug bounty program, what's in scope?