Coinbase awarded a $500k bug bounty

Re:Coinbase awarded a $500k bug bounty by vishnugupta on Thursday August 01, 2024 @07:36AM (#41128130)

Looked around and they seem to be a company rather than an individual?

https://www.certik.com

One of its co-founders is a Yale professor

https://www.linkedin.com/in/zhong-shao-545b754/

One is at Columbia University

https://www.linkedin.com/in/guronghui/

Interesting!

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by miohtama on Thursday August 01, 2024 @11:45AM (#41130409)

CertiK is also notoriously bad reputation auditor company, having black hats on their payroll, and promoting scam projects.

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by lagniappe on Thursday August 01, 2024 @12:14PM (#41130739)

black hats working for an auditing company is like being mad that your dentist cheated on his taxes. your teeth look great either way.

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by RIMR on Thursday August 01, 2024 @12:29PM (#41130860)

You want former black-hats only, with a reputation of being a white-hat hacker in the present day. Handing tons of sensitive customer information to people actively engaged in black-hat hacking and scams is a terrible idea.

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by anvil-on-my-toe on Thursday August 01, 2024 @01:27PM (#41131426)

More like having a drug dealer in your AA group.

[ Parent | on HN ]

Re:Coinbase awarded a $500k bug bounty by sophacles on Thursday August 01, 2024 @01:38PM (#41131538)

Most AA groups have a few drug dealers.

[ Parent | on HN ]