Bug bounty reports15,219
Publicly disclosed HackerOne reports, with the platform's own outcome and severity.
| Report | Status | Weakness | Severity | Disclosed | Bounty | Votes |
|---|---|---|---|---|---|---|
| Race condition in performing retest allows duplicated paymentsAnalysed#429026 | Valid | Race Conditions | – | 2018-12-27 | – | 240 |
| Race Condition leads to undeletable group memberAnalysed#604534 | Valid | Race Conditions | – | 2020-03-20 | – | 153 |
| Race Condition in Flag Submission#454949 | Valid | Race Conditions | – | 2019-07-22 | – | 94 |
| Race condition in joining CTF group#1540969 | Valid | Race Conditions | Low | 2023-01-08 | $500 | 72 |
| Race condition in claiming program credentials#488985 | Valid | Race Conditions | – | 2019-05-19 | – | 54 |
| Race condition allows to send multiple times feedback for the hacker#1132171 | Valid | Race Conditions | – | 2021-09-22 | – | 18 |
Status and severity are HackerOne's. “Access stated” is what the title says; “Access needed” and techniques come from CyberSIXT's analysis of the public report (779 analysed so far), which can be wrong. Data as of 2026-11-14.