Security researcher receives $1M bug bounty for saving company from $350M bug

#1

Post by Magicstatic » Fri, Aug 27, 2021, 7:11 PM UTC

Security researcher receives $1M bug bounty for saving company from $350M bug
twitter.com

Re: Security researcher receives $1M bug bounty for saving company from $350M bug

#2

Post by Magicstatic » Fri, Aug 27, 2021, 7:16 PM UTC

Link to company confirming payment: https://twitter.com/josephdelong/status/1431314816698916865

Link to researcher writeup: https://www.paradigm.xyz/2021/08/two-rights-might-make-a-wro...

Re: Security researcher receives $1M bug bounty for saving company from $350M bug

#3

Post by rvz » Fri, Aug 27, 2021, 7:17 PM UTC

Now that is a great payout towards this security researcher for finding this cryptocurrency bug. Well done to them.

Re: Security researcher receives $1M bug bounty for saving company from $350M bug

#4

Post by baobabKoodaa » Fri, Aug 27, 2021, 8:44 PM UTC

Is this the largest bug bounty in history? (Not counting black hat / gray area "bounties")

Re: Security researcher receives $1M bug bounty for saving company from $350M bug

#5

Post by grogers » Sat, Aug 28, 2021, 12:30 AM UTC

Magicstatic wrote: post #2

Link to company confirming payment: https://twitter.com/josephdelong/status/1431314816698916865 Link to researcher writeup: https://www.paradigm.xyz/2021/08/two-rights-might-make-a-wro...

Wow, 10 minutes to start reading the code from scratch and find the vulnerability. Then just another 20 minutes to confirm the bug with an exploit, some of which were spent fighting with a broken dev environment. That is impressive!

Re: Security researcher receives $1M bug bounty for saving company from $350M bug

#6

Post by [deleted] » Sat, Aug 28, 2021, 1:10 AM UTC

[deleted]

Re: Security researcher receives $1M bug bounty for saving company from $350M bug

#7

Post by dkdk8283 » Sat, Aug 28, 2021, 1:15 AM UTC

I looked at the write up but as a layman I don’t understand any of it. Is there something else that eli5?