Pinned
In January, QED Audit reported two critical THORChain bugs while their bounty program was still active:
> $40M asset theft
> drain all THORChain RUNE bonds
Both vulnerabilities were fixed, but unfortunately, we were not paid. However, we will not advocate for open disclosure as
