PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

XOXO: We Love Coinbase for Loving Bug Bounties

hackerone.com | vulnerability | #bug-bounty | #rce | #case-study | #hackerone | #payouts | #crypto | #coinbase
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Coinbase's bug bounty history: running since 2012 and on HackerOne since 2014 with $175,000+ paid, it just rebalanced payouts—pushing the top RCE bounty to $50,000 to stay top-of-market.
Published
Collected

Related coverage

vulnerability · vercel.com
Our $1 million hacker challenge for React2Shell
We paid $1M to security researchers to break our WAF. Here's what we learned defending against React2Shell.
blog · hackerone.com
Access Denied
We're sorry. The page you are looking for has either been moved or expired.
blog · hackenproof.com
Inside American Express India's Cloud Storage Exposure
An open MongoDB exposed 3M American Express India records, including Aadhaar and PAN numbers. What happened, and does Amex run a bug bounty today?
research · github.com
Steal My Bitcoin Challenge Writeup: PHP 8.4.26 Session Upload Progress Memory Exhaustion Analysis
Provides a detailed binary-level case study on PHP Zend memory manager behavior and worker state persistence after fatal out-of-memory errors.
blog · borghq.io
Two Years of Continuous Security with Banana Gun
A case study in continuous security: two years of Borg's Forward Deployed Security alongside Banana Gun, attacking a $16B+ crypto trading platform as its infrastructure and products kept shipping.
vulnerability · hackerone.com
AT&T Celebrates $1 Million Awarded to Hackers in One Year
AT&T Communications marks one year on HackerOne with $1 million paid to 850+ researchers, an open program that replaced its limited quarterly payouts and now plans faster triage.
Back