Why wouldn't you tell the vulnerabilities?
The winning brief wins the bounty. Submit at https://agentsmith.web3services.net