https://hackerone.com/tinder?type=team
"Reminder: you are not permitted to disclose vulnerabilities to third parties -- including vulnerability brokers. "