---
id: 820
title: "The Three Principles of Bug Bounty Duplicates"
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/the-three-principles-of-bug-bounty-duplicates/"
published_at: "2023-06-29 21:48"
tags: ["bug-bounty", "bugcrowd", "vulnerability-disclosure", "policy", "triage", "program-management", "duplicates", "sqli"]
phying_url: "https://phying.com/item/820"
lang: en
---

# The Three Principles of Bug Bounty Duplicates

## Summary

Bugcrowd outlines three principles for judging bug bounty duplicates—touch the code, pay the bug; similar is not the same; many is not systemic—plus triage scenarios like multiple SQLi findings.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **Published:** 2023-06-29 21:48
- **Original:** https://www.bugcrowd.com/blog/the-three-principles-of-bug-bounty-duplicates/
- **Phying News:** https://phying.com/item/820