How I discovered and responsibly disclosed a vulnerability in a proof-of-stake wallet client and received a $1,000 bug bounty.