Coinbase awarded a $500k bug bounty

Re:Coinbase awarded a $500k bug bounty by StrauXX on Thursday August 01, 2024 @05:54AM (#41127536)

Is this the highest single bounty ever payed? The only other paymnts in this range I can think of are the yearly rewards by Google. But then again thats not really a bounty.

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by SushiHippie on Thursday August 01, 2024 @06:31AM (#41127742)

At least on Hackerone this seems to be by far the highest Bounty

https://hackerone.com/hacktivity/overview?queryString=disclo...

The next highest bounty is $200k from Shopify and then again Coinbase with $115k

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by compsciphd on Thursday August 01, 2024 @08:19AM (#41128386)

we had a talk yesterday by our H1 people to the company and a Q was asked how our bounty values with in with the industry norm. Part of the answer (IIRC, and it was to help understand how different sectors place bounties at different amounts) included that for some crypto things, bounties have gone up to $1mil (but I could be misremembering, it was at the end of a day of lots of talks and I was exhausted).

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by tromp on Thursday August 01, 2024 @07:17AM (#41128005)

A $250K bounty was paid for uncovering a bug in Grin:

https://forum.grin.mw/t/ann-bug-bounty-awarded-to-david-burk...

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by KomoD on Thursday August 01, 2024 @06:54AM (#41127861)

> At least on Hackerone this seems to be by far the highest Bounty

You can't know that, not all bounty amounts are disclosed, and there's also private/confidential programs.

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by BillFranklin on Thursday August 01, 2024 @05:59AM (#41127571)

Someone got a $10m bounty in another crypto platform Wormhole

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by ackbar03 on Thursday August 01, 2024 @06:58AM (#41127883)

That sounds more like a ..um.. ransom than bounty..

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by yieldcrv on Thursday August 01, 2024 @01:42PM (#41131570)

The ransom would have been a few hundred million

So, no.

Crypto organizations float closer to the same market value of exploits that you see blackhat organizations like NSOGroup pay. Its just FAANGs that refuse to value them correctly and put up barriers of entry for pennies.

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by danielvf on Thursday August 01, 2024 @08:42AM (#41128553)

Two months ago someone a 2 million dollar bug bounty, and it was top on HN. [0]

So, no this is a good bounty but still on the small size for a huge crypto project / company.

[0] https://news.ycombinator.com/item?id=40710201

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by estensen on Thursday August 01, 2024 @08:52AM (#41128622)

saurik got $2.1M from Optimism/Boba Network via Immunefi https://www.saurik.com/optimism.html

[ Parent | on HN ]