"Awards of up to EUR 5000 are available for finding security vulnerabilities in ... Mastodon ... There is a 20% bonus for providing a code fix for the bugs they discover."
https://ec.europa.eu/info/news/european-commissions-open-source-programme-office-starts-bug-bounties-2022-jan-19_en
ht to @Doudouosm