---
id: 798
title: "[CVE-2023-35708] Why Bug Bounty Payouts Are Worth Far More Than Their Cost"
cve: CVE-2023-35708
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/why-bug-bounty-payouts-are-worth-far-more-than-their-cost/"
published_at: "2023-11-09 18:20"
tags: ["bug-bounty", "data-breach", "roi", "moveit", "cve-2023-35708", "clop", "security-economics"]
phying_url: "https://phying.com/item/798"
lang: en
---

# [CVE-2023-35708] Why Bug Bounty Payouts Are Worth Far More Than Their Cost

## Summary

Using the MOVEit Transfer vulnerability (CVE-2023-35708) as a case study, the post argues market-rate bug bounty payouts deliver enormous ROI compared to multi-billion-dollar breach costs.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **CVE:** CVE-2023-35708
- **Published:** 2023-11-09 18:20
- **Original:** https://www.bugcrowd.com/blog/why-bug-bounty-payouts-are-worth-far-more-than-their-cost/
- **Phying News:** https://phying.com/item/798