Real IP address is revealed when Tor Browser silently crashes
The recent versions of Tor Browser are incredibly unstable and constantly "silent crash" when doing common things such as opening dialog boxes (like when downloading files) or even just by clicking the "New identity" button. This exposes the users real IP address when the user is also using the tor proxy (because that closes itself as well).
I've tested this on two separate systems, one using the latest version of Ubuntu with the latest version of Tor Browser with all current updates and one using the previous version of Ubuntu with the latest version of Tor Browser with all current updates.
To replicate, open Tor Browser and click the "New identity" button. Tor browser will perform the expected behavior and restart to get the new identity, but will then silently crash and close itself with no warning whatsoever. It can also be replicated anytime Tor Browser has to show a dialog box (like when downloading files).
This is extremely dangerous because users IP addresses will suddenly be exposed without any warning.
This report can be submitted to hackerone for the bounty. I give authorization for you to claim the bounty because I cannot submit the bug anonymously to hackerone. Don't let them try to lowball you on this one, this is some serious shit.