I reported a double-spending bug in Cashu, and they asked me not to disclose it for one year.

Floppy found a DoS vector, received a grant for it, and gave them how much time? Two weeks? Not happy with that, they threatened to attack the mints. What attracts these kind of psycos to the FOSS circles?