What are Bug Bounty programs?
Bug bounty program are programs that reward individuals for uncovering and reporting security vulnerabilities in software applications and websites. A variety of organizations, including technology companies, government agencies, and non-profit organizations offer bounty programs due to increasing cyber crimes. Through bounty programs organizations aim to identify and fix security vulnerabilities before they can be exploited by cyber crooks. In 2022 the FBI’s Internet Crime Report revealed that the public reported a total of 800,944 cybercrime complaints. In addition, phishing remains the most commonly used form with about 3.4 billion emails sent on a daily basis!🤯
Bug bounty programs typically work as follows:
- An organization announces a bug bounty program and sets the bounty amounts for different types of vulnerabilities.
- Individuals (known as security researchers or bug hunters) sign up for the program and start testing the organization's software applications and websites for vulnerabilities.
- When a security researcher finds a vulnerability, they report it to the organization's security team.
- The organization's security team investigates the reported vulnerability and, if it is valid, awards the security researcher a bounty.
In this article, we will explore some Bug Bounty Programs offered by popular Crypto websites:
GEMINI
Image Source: Gemini
Gemini offers a bug bounty program that uses ethical programmers who work to boost platform security and detect vulnerabilities before malicious hackers find them . The program is open to all security researchers, and the rewards obviously depend on the severity of the vulnerability discovered. The rewards range from $1,000 to $50,000
The Gemini bug bounty program is managed by HackerOne, a leading vulnerability coordination and bug bounty platform also used by other exchanges and platforms.
COINBASE
Image Source: hackerone.com
Coinbase has a bug bounty program also managed by HackerOne. The rewards range from $100 to $50,000. Coinbase has updated its bug bounty program several times since its inception in 2014. Keep checking the website to learn of updates and any changes affecting the prize money and other legal aspects.
BINANCE
Image Source: beincrypto.com
Binance offers a bug bounty program that is designed to improve the security of its platform and detect vulnerabilities before malicious hackers find them 1. The program is open to all security researchers, and the rewards are based on the severity of the vulnerability discovered. The rewards range from $1,000 to $10,000 in BNB .
The Binance bug bounty program is managed by Bugcrowd, a leading vulnerability coordination and bug bounty platform. The program is open to all security researchers, and the rewards are based on the severity of the vulnerability discovered. The rewards range from $1,000 to $10,000 in BNB.
GENERAL BOUNTY PROGRAM RULES:
Collecting the prize is only possible, if there is no deliberate malicious action. Therefore, the following "glitches" wont get you a bounty prize:
- Clickjacking and UI redirection with only small security impact.
- Vulnerabilities in third-party apps.
- Zero-day exploits that are < 30 days old.
- Social engineering, phishing, and other forms of deception.
- Theoretical loopholes not actually proven.
- Email verification code flaws, expired password reset links, and issues with password complexity policies.
- Records with invalid or missing sender information.
- Denial of service (DOS) attacks.
- Email/phone number information enumeration (e.g. resetting passwords to verify emails or phone numbers).
- Data leaks with minor security impact (e.g. stack tracing, path exposure, directory listing, and log information).
- Known issues, duplicate submissions, or security issues that have already been disclosed.
- Physical attacks and XSS for PCs.
- Vulnerabilities that can only be exploited on older versions of browsers or platforms.
- Vulnerabilities in auto-filling web forms.
- Using known codebase vulnerabilities without actual proof.
- Lack of security flags in cookies.
For a comprehensive list of available bounty programs all all types of websites, read this article!
Thumbnail image by: bleepingcomputer.com
............................................................................................................................................
TO SUPPORT MY WRITING:
- Buy Me Coffee
- Use Referral CODE: ztrg7mb4dy to Complete Missions Crypto.com
- Earn Bitcoin by Collecting Daily Faucets at Cointiply
- Join Binance: Get Crypto from their Learn to Earn Program
