For anyone wishing to report a vulnerability the best way to contact us is to email
security@blockchain.info. Alternatively you can PM me here or
open a support ticket.
Normally you should receive a response within a few hours, but please allow at least 24 hours for a response before resorting to other channels. We do offer bounties providing the issue is disclosed privately first.