TLDR InfoSec · MISCELLANEOUS

HACKERONE 'GHOSTED' ME FOR MONTHS OVER $8,500 BUG BOUNTY, SAYS RESEARCHER .

theregister.com4 min read

Summary from the TLDR InfoSec newsletter

Security researcher Jakub Ciolek reported two high‑severity Argo CD denial‑of‑service bugs through HackerOne's Internet Bug Bounty, expecting about $8,500 after CVEs were assigned and patches shipped. Instead, he faced months of silence despite repeated follow‑ups, raising concerns about trust in crowdfunded bounty programs and the impact of noisy, low‑quality, or AI‑generated reports on serious submissions.