News for hackers. Stuff that matters.

A comment on Crypto wallet security as seen by security engineers. Parent comment

Re:Crypto wallet security as seen by security engineers by e40 on Wednesday December 15, 2021 @06:50PM (#29573066)
There’s definitely a bit of a cult of open source. Just because I can look at your code does not inherently, magically make it more secure. Especially in a world where the black market pays better than bug bounty programs.

And open source projects likely pay nothing! I've certainly never heard of a paid bug bounty for any open source project, which doesn't mean they don't exist, it just means it's not that common.

[ Parent | on HN ]
Re:Crypto wallet security as seen by security engineers by SEJeff on Wednesday December 15, 2021 @07:36PM (#29573423)
There definitely are a few, kubernetes actually has a dedicated one that hacker one runs. Here are a few examples:

https://www.hackerone.com/internet-bug-bounty

https://huntr.dev/

https://securitylab.github.com/bounties/

https://www.mozilla.org/en-US/security/bug-bounty/

[ Parent | on HN ]
Re:Crypto wallet security as seen by security engineers by mikeodds on Wednesday December 15, 2021 @07:41PM (#29573462)
There are some but for of the projects I’ve looked at, you are almost certainly getting a better payout by selling the vulnerability (monetarily not karma wise) to zerodium et al.
[ Parent | on HN ]