You can find Twitch’s responsible disclosure policy and contact method here: http://www.twitch.tv/p/security