Blockchain.com & HackerOne.com didn't pay a major bug bounty & fixed bug.

[TwitchySeal]

Blockchain.com now claiming that the issue I reported was a bug... but... they knew about it prior to my report! LOL



Dude, if you have a website that you're advertising as military grade security and you know about a problem like that, but allow people to keep using millions and millions of dollars on your website... holy shit.

So either...

A:  They fucked me.

B:  They knowingly put their users at extreme risks and gave their users a false case of security due to their exchange design flaws.

Both are prime examples of corporate dishonest fuckery with shitty engineers covering their tracks and making excuses.

"We've paid out over $30,000" ...what a lame and stupid defense.

[Evilish]

Blockchain.com now claiming that the issue I reported was a bug... but... they knew about it prior to my report! LOL



Dude, if you have a website that you're advertising as military grade security and you know about a problem like that, but allow people to keep using millions and millions of dollars on your website... holy shit.

So either...

A:  They fucked me.

B:  They knowingly put their users at extreme risks and gave their users a false case of security due to their exchange design flaws.

Both are prime examples of corporate dishonest fuckery with shitty engineers covering their tracks and making excuses.

I bet it's 'A'. Them fixing the security issue same day as you reported it and then claiming they were aware of it doesn't add up.

Sorry I didn't follow the full thread, but did you ever proceed with the legal action against them? I am not sure you stand any legal recourse in this case but just curious how it turned out if you did.

[BayAreaCoins]

Sorry I didn't follow the full thread, but did you ever proceed with the legal action against them? I am not sure you stand any legal recourse in this case but just curious how it turned out if you did.

I talked to my lawyer, but the type of judge it would need to go in front of requires a grievance of at least $70,000.

I didn't really lose anything here and I didn't lose much time... We decided we wouldn't waste a Federal Judges time or my money.

Soooo regardless of being wronged... there isn't really shit I can do about it except warn others!

(I agree, A is likely what happened... it's at least best-case scenario for them IMO.)

[ico-services]

This website also talks about 2FA flaw of Blockchain.com
Not sure if it's the same flaw or similar one.

https://blockchaindotcomsucks.com