In a blog post on November 30, Coinbase sought to clarify its bug bounty program policies in response to the recent Uber data breach verdict. The company stated that it still welcomes “responsible” disclosure of security issues, but users who abuse this process will not be awarded bug bounties: “The key word in all of this is ‘responsible’. In the wake of the recent Uber verdict, there is a lot of concern in the industry about bug bounty submissions becoming extortion attempts. At Coinbase, [...] we’ve put a lot of thought into how we operate our bug bounty program to stay on the right side of the law.”(Cointelegraph)
All Comments