4 ms·
It doesn't say they paid out yet, just that they 'awarded' the bounty, which could just be GitHub telling HackerOne they intend to pay without actually having m
by Tijdreiziger 7y ago
It doesn't say they paid out yet, just that they 'awarded' the bounty, which could just be GitHub telling HackerOne they intend to pay without actually having moved any money yet.
- mtnGoat 7y agoRegardless, the fact that someone at Github can approve such a large payment so quickly, is still impressive.
- NightlyDev 7y agoI don't think $25k is a large payment in githubs eyes. There are much smaller companies that doesn't even blink spending ten times as much. And this was definitely approved before they went out and told people what they would pay for different bugs.