We've just launched a bug bounty program, in partnership with Immunefi.
The Overlay bug bounty program is focused around our smart contracts with a primary interest in the prevention of loss of user funds, either by direct draining of locked funds or locking users funds in contract.
For more details about bounty, visit https://immunefi.com/bounty/overlay.
All payouts are done by the Overlay team and are pegged to the USD values set here and are payable in USDC.