We launched a bug bounty program for OpenZeppelin Contracts in partnership with immunefi! Check out the link below for more details and stay tuned for an exciting announcement around further securing the library