Clubhouse launches bug bounty program with $3,000 on offer for critical vulnerabilities

guest · Nov 18, 2021

Clubhouse launches bug bounty program with $3,000 on offer for critical vulnerabilities
Audio-based social media platform prioritizes access control bypasses and information disclosure flaws
November 18, 2021
https://portswigger.net/daily-swig/...h-3-000-on-offer-for-critical-vulnerabilities

Clubhouse, the audio-based chatroom application, has rolled out a public bug bounty program on HackerOne.

Financial rewards for unearthing critical flaws are pegged at $3,000, while ‘high’ severity bugs will command bounties of $1,500. Bug hunters could get $500 and $100, respectively, for valid ‘medium’ and ‘low’ severity bugs.
Click to expand...

Rapid rise
Clubhouse users can set up or join chatrooms to discuss all manner of topics with friends or strangers using their device’s mic – as opposed to via text, emoticons and visual memes, as has otherwise been the norm on social media.

The app was downloaded more than 34 million times within a year of its launch, although its growth is since said to have slowed.
Click to expand...

In a blog post published to coincide with the program’s launch, Clubhouse said:

“While many bug bounty programs promise high rewards for catastrophic-level discoveries, our approach keeps the scope broad so we can address as many bugs as possible. To that end, if you can help us fix bugs that could cause harm to our community, you’ll be eligible to earn a bounty.”
Click to expand...

Clubhouse is aiming to triage vulnerabilities within two business days of notification, and to pay bounties within 14 business days.

The app developer has already paid out more than $10,000 to ethical hackers within a few days of the program’s launch, with the highest bounty at the time of writing $9,850.

“We’re excited to help support security for a platform like Clubhouse, which is already making waves through the conversations they’ve prompted within their current community,” said Michiel Prins, co-founder of HackerOne.
Click to expand...

Clubhouse: Calling All Hackers: Introducing Bug Bounties on Clubhouse

It’s because of this that Clubhouse invests so heavily in security, privacy, and trust and safety. You may have also noticed that we often roll out major new features gradually in a limited beta, which ensures we can catch and address any bugs before opening them to the whole community.

However, even with all of these efforts, we know that more eyes make for a better product, which is why we’re thrilled to open up Clubhouse’s bug bounty program to the public starting today!
Click to expand...

Log in or Sign up

Clubhouse launches bug bounty program with $3,000 on offer for critical vulnerabilities

guest Guest

Log in or Sign up

Clubhouse launches bug bounty program with $3,000 on offer for critical vulnerabilities

guest Guest

Useful Searches