If you believe that you have discovered a security vulnerability in Counterparty Core or any related repositories, please e-mail security@counterparty.io with a bug report and you will be answered promptly. Do not open a public issue or pull request for a security vulnerability until the developers have confirmed that it is safe to disclose.
The Counterparty bug bounty program has been discontinued. Vulnerability reports are still very much appreciated and will be acted on promptly, but no payments will be made for them. Do not request payouts or include payment addresses in issues or pull requests; PRs that do so will be closed.