If you believe you have found a security vulnerability with Nebula, please let us know right away. We will investigate all reports and do our best to quickly fix valid issues.
For critical reports, if you are interested in a bug bounty: You can submit your report on HackerOne.
For other reports: You can submit a report via GitHub.