If someone reaches out to ask about reporting vulnerabilities found in Zipline applications or website, try to get a sense of the general issue they are reporting. Some will be after a bounty to report such problems.
The policy governing Zipline's vulnerability reporting can be found at https://www.flyzipline.com/zipline-vulnerability-disclosure-policy.
If they have specific questions about bounties paid for reporting vulnerabilities, direct them to [email protected] for further assistance.