3 ms·All private tokens are leaked to an unauthenticated attacker3 points by ryanlol 9y agozeveb 9y agoOuch, that's really, really not good.QUFB 9y agoAnd the reward is some Gitlab swag?sytse 9y agoSwag and a followup call to receive thanks from our director of Security and me. We're working on offering monetary bounties on HackerOne in the future.