Bounty Progress - March 2019

I have a few goals for my bug bounty work in 2019:

• $50k in total bounties/bonuses
• At least one $5k bounty (for reference, current best is $4802)
• At least half my reports rated high/critical (CVSS 7+)
• Blog about my progress monthly, with a continuously updated entry for each month

Goal Health #

Current total earnings for the year: $13179

This is 26.35% of my goal for the year. By the end of March I should be at $12500 to be on track, putting me $679 ahead as of 2019-03-26

Lifetime Stats #

• 19 bounties paid
• $24141 total earned
• $1270 average bounty

Bugs #

• HIGH Discovered 2018-11-29, Paid 2019-03-03 by private – $667 (total $3000 bounty, shared with two other researchers; $1000 paid previously)
• LOW Discovered 2019-03-06, Paid 2019-03-11 by private – $100
• HIGH Discovered 2019-03-07, Paid 2019-03-11 by private – $1500
• CRITICAL Discovered 2019-03-17, Unpaid by private
• CRITICAL Discovered 2019-03-17, Unpaid by private
• CRITICAL Discovered 2019-03-17, Unpaid by private
• CRITICAL Discovered 2019-03-17, Unpaid by private
• CRITICAL Discovered 2019-03-17, Unpaid by private
• MEDIUM Discovered 2019-03-19, Unpaid by private – N/A :(
• MEDIUM Discovered 2019-03-22, Paid 2019-03-26 by private – $300
• HIGH Discovered 2019-03-22, Paid 2019-03-26 by private – $750
• CRITICAL Discovered 2019-03-27, Unpaid by private

Plan and Concerns #

Due to increased work volume, I’m not sure I’ll be able to actually commit large periods of time for bounty hunting. I’ll update as things progress, but I think I’m going to end up playing catch-up next month.

Happy Hacking,

- Daeken