Can I earn an XDM bounty by reporting the CREATE Massive "Worthless" TOKENs vulnerability in proposed ION wallet (Ver. 3.?)

"Once this format has been sent to the email address and you have attached any screenshots needed then please allow for 48 hours for us to respond to you. Submissions that do not follow the reporting format may be ignored/closed without action.
If we have issue reproducing your vulnerability we will contact you for further details but this will delay your potential earning of a bounty."
This is good innovation to build stronger V3 platform. During my Alpha & Beta testing of Ionomy.com products, I sent encouraging emails to the ionomy support staff encouraging bounty for defect finder and customer support person working the defect collection of data.