Please send any issue that you feel affects the security of Trustroots to hello@trustroots.org.
We unfortunately don't currently have any budget to pay for security bug bounty programs. We are a non-profit, open source, volunteer based organisation.
- December 24, 2019 Check for user id before modifying offer, kudos Kenny Flannery