RARA is currently working on setting up a responsible disclosure based bug bounty program. Until that is formally launched, please chime in on the "support-help" channel in our discord server to initiate a private discussion about any possible vulnerabilities or security concerns.
