Hack the Bank 2.0: A Private Bug Bounty Case Study for Banks

Summary

A HackenProof case study of Hack the Bank 2.0: the two-week private bug bounty run with Ukrainian bank PUMB, where 20 invited researchers filed 50+ reports, including critical findings.

Published: 2023-01-16 16:37
Collected: 2026-08-03 15:18

original ↗

← PreviousHackenProof, in Partnership with Hack The Box—the Four Million Platform—Has Launched a CTF Security Challenge for the Blockchain Industry Next →CrowdStrike 2026 Threat Hunting Report: Exploitation Window Closes as AI Use Accelerates

Related coverage

blog · hackenproof.com

Hack The Bank 2.0

A case study of Hack the Bank 2.0, HackenProof's two-week private bug bounty with Ukrainian bank PUMB: twenty invited researchers filed 50+ reports, including critical findings.

vulnerability · projectdiscovery.io

Securing the distributed perimeter: How Elastic scaled proactive detection with ProjectDiscovery Cloud

Elastic ran ~50,000 servers across AWS, Azure, and GCP and adopted ProjectDiscovery Cloud, scanning 14,500 external assets in under five minutes after outgrowing legacy scanners like BitSight.

vulnerability · projectdiscovery.io

How ConnectWise streamlined vulnerability detection with ProjectDiscovery

ConnectWise moved vulnerability scanning for 20,000+ AWS instances from Tenable Cloud to ProjectDiscovery, cutting scan time for 10,000 assets from two days to 15 minutes and retiring custom scripts.

vulnerability · projectdiscovery.io

How Paddle Strengthened Its Security Posture with ProjectDiscovery

Paddle consolidated scattered Nuclei and Subfinder scans onto ProjectDiscovery, centralizing attack surface visibility, cutting discovery from days to hours, and supporting PCI DSS and SOC 2 audits.

blog · hackenproof.com

Vulnerability Disclosure Policy: A Guide for Business Leaders

Explains what a vulnerability disclosure policy is and why the EU CRA and NIS2 now make it a compliance expectation, then walks through the key decisions behind each policy section, offering a free template for security and legal teams to adapt.

blog · hackenproof.com

A Payment Platform for Security Researchers—No Bug Bounty Program Required

HackenProof launched a payment platform for rewarding researchers outside formal bug bounty programs: companies deposit funds, while the platform handles agreements, KYC, contracts and payouts.

back