Hey ​@Pranil,

Thanks for asking this question. I can confirm the Bug Program is still open. Please submit your report to vulnerabilities@strava.com and you’ll be given access by our team to complete the vulnerability submission directly through a platform named HackerOne.
Hope this helps!