0xbow.io Awards $5,000 Bounty for Privacy Pools v1 SDK Bug Disclosure

Ethereum Foundation-backed 0xbow.io, a privacy and regulatory compliance tool, announced on X that it paid researcher ross.wei a $5,000 bounty for disclosing a vulnerability in the Privacy Pools v1 SDK. The flaw reduced the entropy of user account master key generation, according to the team. The bug was patched in March, a migration process was provided, and no user funds were lost.