diff --git a/SECURITY.md b/SECURITY.md
index 48326f149..905316c2d 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -90,10 +90,10 @@ We currently do not use the Github workflow to publish security advisories. Once
 
 <a name="bounty"></a>
 ## Security Bug Bounties
-The Solana Foundation offer bounties for critical Solana security issues. Please
-see below for more details. Either a demonstration or a valid bug report is all
-that's necessary to submit a bug bounty. A patch to fix the issue isn't
-required.
+At its sole discretion, the Solana Foundation may offer a bounty for
+[valid reports](#reporting) of critical Solana vulnerabilities. Please see below
+for more details. The submitter is not required to provide a
+mitigation to qualify.
 
 #### Loss of Funds:
 $2,000,000 USD in locked SOL tokens (locked for 12 months)