Unless required by law, we will not take legal action against you, the person who reported the vulnerability. We will however prosecute against anyone abusing any system vulnerabilities.
We do not pay bounties at this time. Do not expect compensation as we are focused on other issues at this moment.