---
id: 3617
title: "A Bountiful Year: Top Bugs and Hacktivity Highlights in 2016"
source_domain: hackerone.com
source_url: "https://www.hackerone.com/blog/bountiful-year-top-bugs-and-hacktivity-highlights-2016"
published_at: "2017-01-12T19:23:16Z"
tags: ["bug-bounty", "php", "deserialization", "year-in-review", "hackerone", "hacktivity"]
phying_url: "https://phying.com/item/3617"
lang: en
---

# A Bountiful Year: Top Bugs and Hacktivity Highlights in 2016

## Summary

HackerOne's 2016 Hacktivity year in review: the community's five most upvoted vulnerability reports, led by a PHP deserialization chain enabling remote shell, plus payouts like $12,500 — the largest from HackerOne's own program.

## Intelligence Metadata

- **Sources:** hackerone.com
- **Published:** 2017-01-12T19:23:16Z
- **Original:** https://www.hackerone.com/blog/bountiful-year-top-bugs-and-hacktivity-highlights-2016
- **Phying News:** https://phying.com/item/3617