Public 99designs bug reports.

Team Bounty Title
99designs - Source Code Disclosure (PHP)
99designs - CSRF to connect attacker's twitter account to logged in victims account
99designs $400 report a reflected XSS
99designs - Reflected XSS in 99designs.com
99designs - Insecure transition from HTTP to HTTPS in form post
99designs - Server leaks version number