HackerOne: Missing Password Confirmation at a Critical Function (Payout Method)

Hey Hackerone Team, Payout being one the very important matter demands to be taken extra precaution. But at our lovable platform "Hackerone" there is no Password Confirmation at one of very critical functions i.e Payout Method/state Change. All the other important functions like : 1. Email Change...

HackerOne: Adding or removing a new non-preferred payout method does not trigger an e-mail or account notification

While we previously sent an e-mail to the user when their preferred payout method was modified, we did not send a notification when adding or removing a new non-preferred payout method. This oversight was pointed out by this report...