> HackerOne 'ghosted' me for months over $8,500 bug bounty, says researcher
[AUTHOR: Jessica Lyons]
[DATE: 07/01/2026 00:17]
[LANGUAGE: EN]
Long after CVEs issued and open source flaws fixed Last fall, Jakub Ciolek reported two denial-of-service bugs in Argo CD, a popular Kubernetes controller, via HackerOne's Internet Bug Bounty (IBB) program. Both were assigned CVEs and have since been fixed. But instead of receiving an $8,500 reward for the two flaws, Ciolek says, HackerOne ghosted him for months.…