Thanks for sharing this. I’ve also seen similar delays in other bug bounty programs where CVEs are published but payouts take months or get ignored. Curious if anyone has insights on how to escalate these issues effectively when the official channels go silent.