PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

PayPal's Third LHE Brings Top Global Hackers to the Virtual Stage

hackerone.com | blog | #bug-bounty | #account-takeover | #mobile-security | #community | #hackerone | #live-hacking-event | #paypal
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

In PayPal's third Live Hacking Event with HackerOne, 52 hackers from 17 countries black-box tested PayPal's mobile apps, surfacing account takeover, authentication, and transaction bugs.
Published
Collected

Related coverage

blog · hackerone.com
PayPal is our Virtual Pal
Sixty-one hackers from thirteen countries hacked PayPal in HackerOne's h1-2006 virtual event, disclosing over 100 unique vulnerabilities and earning more than $770,000 in bounties in two weeks.
blog · hackerone.com
h1-2006 CTF
Recap of the h1-2006 CTF, where 4,282 players raced to regain access to a fictional BountyPay account. Winners Nytr0gen, Zoczus, and bugra earn invites to a live hacking event with PayPal.
blog · hackerone.com
Access Denied
We're sorry. The page you are looking for has either been moved or expired.
blog · hackerone.com
Measuring The Fix: How We Evaluate Frontier Models on Remediation Quality
HackerOne tested frontier models on security fix quality and found the judge mattered more than the model. See how CTEM remediation earns engineer trust.
blog · hackerone.com
Critical PHP Vulnerabilities: What Security Teams Need to Know
Learn about the critical PHP vulnerabilities, HackerOne’s response, and the rise in reports. Review patching guidance and coordinated disclosure practices.
blog · hackerone.com
Project Glasswing: What We Learned Running a Frontier Model on Our Own Codebase
HackerOne ran Anthropic's Mythos 5 model against its own production code; it surfaced a critical RCE spanning three safe-in-isolation commits, illustrating compositional risk that diff review misses.
Back