Update HackerOne program link (#24)

The VDP program now stops accepting new reports, so all new reports should go to BBP.
circlefin · Dec 6, 2024 · d9a7daa · d9a7daa
1 parent 8c87768
commit d9a7daa
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/SECURITY.md b/SECURITY.md
@@ -2,4 +2,4 @@
 
 ## Reporting a Vulnerability
 
-Please do not file public issues on Github for security vulnerabilities. All security vulnerabilities should be reported to Circle privately, through Circle's [Vulnerability Disclosure Program](https://hackerone.com/circle). Please read through the program policy before submitting a report.
+Please do not file public issues on Github for security vulnerabilities. All security vulnerabilities should be reported to Circle privately, through Circle's [Bug Bounty Program](https://hackerone.com/circle-bbp). Please read through the program policy before submitting a report.