Is the bug bounty still open? Do you mind signing a message from an address that holds 10 BTC as a proof that you're serious about the bug bounty? The website looks neatly done but just to make sure your business is legit, people need proofs.