We currently do not have a bug bounty program for Firm protocol. However, since v1 is currently deployed in live networks, user funds could be at risk should a critical vulnerability exist.
If you believe you have found a vulnerability in Firm protocol, please responsibly disclose it by emailing [email protected].