September 6, 2019

Bounty Progress - September 2019

I have a few goals for my bug bounty work in 2019:

$50k in total bounties/bonuses
(ACHIEVED!) At least one $5k bounty (for reference, current best is $4802)
At least half my reports rated high/critical (CVSS 7+)
Blog about my progress monthly, with a continuously updated entry for each month

Update #

I’ve really had a hard time with this lately. I burnt out pretty bad in May and took some time off from bug bounty and didn’t really get started again until hacker summer camp, back in August. I’ll try to update more frequently.

Goal Health #

Current total earnings for the year: $48679

This is 97.358% of my goal for the year. By the end of September I should be at $37500 to be on track, putting me $11179 ahead as of 2019-09-21

Lifetime Stats #

29 bounties paid
6 bonuses paid
$59641 total earned
$1970 average bounty

Bugs #

CRITICAL Discovered 2019-08, Paid 2019-09 by Verizon Media – $5125 ($20,500 split with three other researchers)
CRITICAL Discovered 2019-08, Paid 2019-09 by private – $4000 ($16,000 split with three other researchers)
CRITICAL Discovered 2019-08, Paid 2019-09-06 by Slack – $1000 ($4000 split with three other researchers)
CRITICAL Discovered 2019-09, Paid 2019-09-21 by private – $10000 ($15,000 + $5000 bonus split with one other researcher)
CRITICAL Discovered 2019-09-20, Paid 2019-09-21 by private – $1500 ($3000 split with one other researcher)
CRITICAL Discovered 2019-09-20, Paid 2019-09-21 by private – $1750 ($3500 split with one other researcher – $2500 + $500 + $500)
CRITICAL Discovered 2019-09-20, Paid 2019-09-21 by private – $500 ($1000 split with one other researcher)

Other payouts #

Checklist completed on private – $100

Plan and Concerns #

I don’t currently have a concrete plan for achieving my goals, so my plan is to come up with a new plan. I did achieve my $5k bounty goal though! Very proud of that.

Happy Hacking,

- Daeken

Kudos