Like all pieces of software, reddit has bugs – and it always will. Some of them will take the form of security vulnerabilities.
If you find a security vulnerability in reddit, please privately report it to firstname.lastname@example.org. We'll get back to you ASAP, usually within 24 hours.
Once the issue is fixed, if you provide your reddit username, we'll credit your account with a whitehat trophy.
Thank you and good hunting.