Status Update

We have processed a total of 49 submissions so far, with 7 of them being eligible for a payout. The following vulnerabilities have been fixed and hence can be listed.

• Politeia email notification on password change
• Politeia cached user data needs to be cleared out on logout
• Stakepool cached user data needs to be cleared out on logout
• Stakepool invalidate password reset token on email change
• Stakepool password reset token leaking to github