Yes, they have a bounty program. Check bounty0x: https://beta.bounty0x.io/hosts/ONAM%20Exchange

But seriously. Don't quote the opening post when you have such a question ...