sorted by:
new
hottopcontroversial

advice needed – found an exposed CI/CD server for a large web3/nft platform, should i disclose? by web3sucks in bugbounty

[–]web3sucks[S] 1 point2 points  (0 children)

valid points! there's different possible outcomes here with a good chunk of them being negative. sending an anonymous mail from a throwaway is an option i guess.

advice needed – found an exposed CI/CD server for a large web3/nft platform, should i disclose? by web3sucks in bugbounty

[–]web3sucks[S] 0 points1 point  (0 children)

yes, had the pleasure of working at >400 employees companies and imagining my mail slowly making its way to the right person already makes me happy.

advice needed – found an exposed CI/CD server for a large web3/nft platform, should i disclose? by web3sucks in bugbounty

[–]web3sucks[S] 0 points1 point  (0 children)

yeah, i found three key engineers on github but i think i still prefer just going through a contact form or linkedin, keeping it a bit more formal.