In case you found a security vulnerability you can report it by going through the Neufund Bug Bounty Program. To get more information please refer to Neufund bug bounty, how it works article.