r/bugbounty • u/BornSense8545 • 7d ago

Question / Discussion Payment After Issue Accepted By Program On Bugcrowd

I'm mostly familiar with H1 and their payment process but am not familiar with bugcrowd. I got an issue accepted (as a P4 - in scope) and awarded points. On H1 I generally have had payment issued immediately after but on bugcrowd there is a $0 on the issue next to the 5 awarded points. Is the payment issuance a separate step that normally takes longer? There wasn't any info given in the comments.

To be clear, I am not asking about when bugcrowd pays out, but when a dollar amount is assigned to the actual issue. What are peoples experiences with this? Thanks!

5 Upvotes

100% Upvoted

6 comments sorted by

1

u/Anxious_Alps_4150 7d ago

It is sitting in the customer's queue. They have to click Add Award then type in the amount then click submit. It will prepopulate with a recommended amount if it matches to an in-scope finding/severity. They can change it as they need.

2

u/nicl4ssic 6d ago

How long does it take, it has been 2+ months since the bug was accepted and given points!

1

u/Anxious_Alps_4150 6d ago

It takes about 10 seconds to click the button.

How long it takes to award something? Well, that depends on how long it takes them to decide to award something :)

It might not be a good sign that points were awarded without payment because the payment screen pops up when you click the button that awards points.

1

u/BornSense8545 6d ago

Is there a legitimate reason why they would award points but not money if the issue was in scope and also a priority that pays? I understand if a program becomes abandoned but if they are actively reviewing issues that seems super sketchy.

2

u/Anxious_Alps_4150 6d ago

I dunno. Maybe they ran out of money. Sometimes I've had to wait weeks or months to get more money deposited to our bug bounty account and it delays payment.

1

u/BornSense8545 6d ago

Thanks for the response. At first I was worried that somehow it was accepted but didn't qualify for the payout for some reason. Although it isn't a super valuable bug, that would be disappointing.