Researcher Claims HackerOne Delayed $8,500 Bug Bounty Payment

Researcher Claims HackerOne Delayed $8,500 Bug Bounty Payment

First seen 7 Jan 2026, 17:41 UTC Theregister 98% similarity 22.3

Article Content

Browse articles
ThreatCluster

Jakub Ciolek reported two denial-of-service vulnerabilities in Argo CD through HackerOne's Internet Bug Bounty program last fall. Although both vulnerabilities were assigned CVEs and fixed, Ciolek states he did not receive the promised $8,500 reward and was left without communication for months. He was only contacted after The Register inquired about the status of his payment.

ThreatCluster AI How this analysis works

Community

Browse all →

Tracked Entities in This Story