There's no bug bounty for "get an employee to reset an account for you." "You can update the email address of any Twitter user, [...] without sending any kind

There's no bug bounty for "get an employee to reset an account for you." "You can update the email address of any Twitter user, [...] without sending any kind of notification to the user" sounds like a bug, but if your repro starts with "get access to the internal dashboard" it'll get rejected out of hand.