3 ms·

Is this the highest single bounty ever payed? The only other paymnts in this range I can think of are the yearly rewards by Google. But then again thats not rea

Is this the highest single bounty ever payed? The only other paymnts in this range I can think of are the yearly rewards by Google. But then again thats not really a bounty.

BillFranklin 2y ago
Someone got a $10m bounty in another crypto platform Wormhole
- ackbar03 2y ago
  That sounds more like a ..um.. ransom than bounty..
  - yieldcrv 2y ago
    The ransom would have been a few hundred million So, no. Crypto organizations float closer to the same market value of exploits that you see blackhat organizations like NSOGroup pay. Its just FAANGs that refuse to value them correctly and put up barriers of entry for pennies.
SushiHippie 2y ago
At least on Hackerone this seems to be by far the highest Bounty https://hackerone.com/hacktivity/overview?queryString=disclosed%3Afalse&sortField=total_awarded_amount&sortDirection=DESC&pageIndex=0 https://hackerone.com/hacktivity/overview?queryString=disclo... The next highest bounty is $200k from Shopify and then again Coinbase with $115k
- KomoD 2y ago
  > At least on Hackerone this seems to be by far the highest Bounty You can't know that, not all bounty amounts are disclosed, and there's also private/confidential programs.
- tromp 2y ago
  A $250K bounty was paid for uncovering a bug in Grin: https://forum.grin.mw/t/ann-bug-bounty-awarded-to-david-burkett-grin/8672 https://forum.grin.mw/t/ann-bug-bounty-awarded-to-david-burk...
- compsciphd 2y ago
  we had a talk yesterday by our H1 people to the company and a Q was asked how our bounty values with in with the industry norm. Part of the answer (IIRC, and it was to help understand how different sectors place bounties at different amounts) included that for some crypto things, bounties have gone up to $1mil (but I could be misremembering, it was at the end of a day of lots of talks and I was exhausted).
danielvf 2y ago
Two months ago someone a 2 million dollar bug bounty, and it was top on HN. [0] So, no this is a good bounty but still on the small size for a huge crypto project / company. [0] https://news.ycombinator.com/item?id=40710201 https://news.ycombinator.com/item?id=40710201
estensen 2y ago
saurik got $2.1M from Optimism/Boba Network via Immunefi https://www.saurik.com/optimism.html https://www.saurik.com/optimism.html

Is this the highest single bounty ever payed? The only other paymnts in this range I can think of are the yearly rewards by Google. But then again thats not really a bounty.

BillFranklin 2y ago

Someone got a $10m bounty in another crypto platform Wormhole

ackbar03 2y ago
That sounds more like a ..um.. ransom than bounty..
- yieldcrv 2y ago
  The ransom would have been a few hundred million So, no. Crypto organizations float closer to the same market value of exploits that you see blackhat organizations like NSOGroup pay. Its just FAANGs that refuse to value them correctly and put up barriers of entry for pennies.

SushiHippie 2y ago

At least on Hackerone this seems to be by far the highest Bounty https://hackerone.com/hacktivity/overview?queryString=disclosed%3Afalse&sortField=total_awarded_amount&sortDirection=DESC&pageIndex=0 https://hackerone.com/hacktivity/overview?queryString=disclo... The next highest bounty is $200k from Shopify and then again Coinbase with $115k

KomoD 2y ago
> At least on Hackerone this seems to be by far the highest Bounty You can't know that, not all bounty amounts are disclosed, and there's also private/confidential programs.
tromp 2y ago
A $250K bounty was paid for uncovering a bug in Grin: https://forum.grin.mw/t/ann-bug-bounty-awarded-to-david-burkett-grin/8672 https://forum.grin.mw/t/ann-bug-bounty-awarded-to-david-burk...
compsciphd 2y ago
we had a talk yesterday by our H1 people to the company and a Q was asked how our bounty values with in with the industry norm. Part of the answer (IIRC, and it was to help understand how different sectors place bounties at different amounts) included that for some crypto things, bounties have gone up to $1mil (but I could be misremembering, it was at the end of a day of lots of talks and I was exhausted).

danielvf 2y ago

Two months ago someone a 2 million dollar bug bounty, and it was top on HN. [0] So, no this is a good bounty but still on the small size for a huge crypto project / company. [0] https://news.ycombinator.com/item?id=40710201 https://news.ycombinator.com/item?id=40710201

estensen 2y ago

saurik got $2.1M from Optimism/Boba Network via Immunefi https://www.saurik.com/optimism.html https://www.saurik.com/optimism.html