Balmy ImmuneFi bug bounty program is focused on the prevention of negative impacts to the Balmy ecosystem, which currently covers our smart contracts and integrations. As such, all bug disclosures must be done through ImmuneFi's platform.
Further details and bounty values can be found here: https://immunefi.com/bounty/balmy/