Update readme with bug bounty info

Author: Krishang Nadgauda

README.md

@@ -102,6 +102,11 @@ The thirdweb registry (`TWRegistry`) and factory (`TWFactory`) have been deploye
 - `TWFactory`: [0x5DBC7B840baa9daBcBe9D2492E45D7244B54A2A0](https://blockscan.com/address/0x5DBC7B840baa9daBcBe9D2492E45D7244B54A2A0)
 - `TWFactory` (Fantom mainnet): [0x97EA0Fcc552D5A8Fb5e9101316AAd0D62Ea0876B](https://blockscan.com/address/0x97EA0Fcc552D5A8Fb5e9101316AAd0D62Ea0876B)
 
+
+## Bug reports
+
+Found a security issue with our smart contracts? Send bug reports to security@thirdweb.com and we'll continue communicating with you from there. We're actively developing a bug bounty program; bug report payouts happen on a case by case basis, for now.
+
 ## Feedback
 
 If you have any feedback, please reach out to us at support@thirdweb.com.