The European Commission and ECOSPO is currently keen on identifying what is critical for digital sovereignity.
You can get a bounty up to 5.000€ if you find a security vulnerability in e.g. mastodon plus a 20% bonus if you fix it.
Please also note that there will be an open, transparent application process for experts evaluating which things are critical for the Sovereign Tech Fund …