PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Six Years of Proactive Defense: Deribit’s Journey with HackerOne

hackerone.com | blog | #bug-bounty | #case-study | #hackerone | #defense-in-depth | #crypto | #deribit
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Deribit, the largest Bitcoin and Ethereum options exchange, explains how six years of a HackerOne bug bounty fits its layered defense, complementing pentests, red teaming, and ISO 27001 compliance.
Published
Collected

Related coverage

blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
blog · borghq.io
Two Years of Continuous Security with Banana Gun
A case study in continuous security: two years of Borg's Forward Deployed Security alongside Banana Gun, attacking a $16B+ crypto trading platform as its infrastructure and products kept shipping.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
blog · hackerone.com
CTEM for Enterprise: Scaling Continuous Exposure Management Across Complex Environments
This coverage gives security teams current context for monitoring, validation, and remediation.
Back