0xbow.io, an Ethereum Foundation-supported privacy and regulatory compliance tool, paid researcher ross.wei a $5,000 bounty for disclosing a vulnerability in the Privacy Pools v1 SDK. The flaw reduced the entropy (randomness used for security) of user account master-key generation. It was fixed in March, and the team has provided a migration process. No user funds were lost.