Well, the last two rewards do not seem really substantial enough for what they're worth. What makes you think a hacker finding that kind of exploit would not try to empty your wallets and/or more malicious actions?
That said, there's still some minor wording errors here and there:
https://1broker.com/?c=faqOn weekends and on holidays currently all markets, except BTC/USD, are closed.
All markets are closed on weekends and holidays except BTC/USD.
https://1broker.com/?c=about_securityInstantly after creation all private keys of these addresses are gpg (CAST-128) encrypted with a long cipher and backed up at several highly secured locations.
GPG should be caps in this case. A comma between creation and all would be appropriate too.
No external resources are loaded when logged in.
External. Also, a subject here would improve the sentence; i.e.: when users are logged in.
Every user can look into a detailed access log of the account.
Every user can look into a detailed access log of their accounts.
Session cookies are protected from XSS attacks and are only sent with enabled TLS connection.
With an enabled TLS connection, or through a TLS connection.
HSTS prevents users from man-in-the-middle attacks.
Protects.
https://1broker.com/?c=about_privacy...Non-personal identification information may include the browser name, the type of computer and technical information about Users means of connection to our Site,..
the User's.
1Broker may collect and use Users personal information for the following purposes:
the User's.
https://1broker.com/?c=about_tos If necessary, 1Broker is completely sold and the amount of purchase is divided and payed out to our customers.
If necessary, 1Broker will be completely sold, and the proceeds divided and paid out to our customers.
If a customer lost high amounts during an unscheduled outage he can contact us and we will try to find a solution for both parties.
Loses.
Whew, that's it so far. There's still some weird wording here and there, but the more blatant errors are listed above.
This is known. Usernames are intentionally converted to lowercase during signup. You can still log in with "subSTRATA" however. 
Sent you: 0.225 BTC