Immunefi suspended Trust Security for 90 days, accusing it of mischaracterizing a bounty denial for an out-of-scope bug.