diff --git a/data/web/core.telegram.org/bug-bounty.html b/data/web/core.telegram.org/bug-bounty.html
index 4cf5ba5f91..a39bd790ca 100644
--- a/data/web/core.telegram.org/bug-bounty.html
+++ b/data/web/core.telegram.org/bug-bounty.html
@@ -114,6 +114,9 @@
 <p>We ask for all submissions and correspondence to be sent <strong>directly</strong> to <a href="mailto:security@telegram.org">security@telegram.org</a> – Telegram currently does <strong>not</strong> maintain a presence on third-party bug bounty platforms or services.</p>
 <h3><a class="anchor" name="prize" href="#prize"><i class="anchor-icon"></i></a>Prize</h3>
 <p>Valid reports that result in a change of code or configuration are eligible for bounties, ranging from <strong>$100</strong> to <strong>$100,000</strong> or more, depending on the severity of the issue. We reserve the right to ultimately determine both the validity and the appropriate compensation for each report at our discretion.</p>
+<blockquote>
+<p>In general, <strong>app-level changes</strong> can expect bounties ranging from <strong>$100</strong> to <strong>$10,000</strong>. <strong>Protocol-level issues</strong> may be eligible for rewards of up to <strong>$100,000</strong> or more.</p>
+</blockquote>
 <hr>
 <h4><a class="anchor" name="test-environment" href="#test-environment"><i class="anchor-icon"></i></a>Test Environment</h4>
 <p>To log in to the <strong>test environment</strong>, use either of the following:</p>