Nexo also runs a public vulnerability disclosure process, with a reporting channel through Intigriti, defined priorities for triage, safe-harbor protection for researchers who follow the policy, and recognition for those who contribute.