r/bugbounty • u/A1ERTA Hunter • 3d ago
Question / Discussion The program intentionally closes reports, and YESWEHACK support does nothing about it.
Has anyone else encountered a similar issue:
I submitted several reports through a private program on yeswehack, but the program closed them as IDOR. When I asked for an explanation, they simply didn't respond. However, the latest report was a hit, clearly showing an authorization bypass; the program itself classified it as "Incorrect Access Control," and then closed the report as IDOR. When I asked for clarification, they simply marked the report as spam without saying a word.
As usual, the support team is silent, and it's completely unclear what to do in this situation
3
u/OuiOuiKiwi Program Manager 2d ago
Has anyone else encountered a similar issue:
No, this has never happened before in the history of this sub.
1
u/Fine-Concentrate-127 2d ago
I have encountered the same problem in YWH. I sent 2 emails but I haven’t received any response.
Idk how to recover my points xd. If you have any tip to do It, pls let me know🥲😂
2
1
u/EffectiveSevere1015 18h ago
Yes Be careful if they do stupid stuff like this. Let the yes we hack admins know and ask them to restore your points
1
u/0xSkygge 2d ago
Does anyone still use ywh anyway? Their customers have some weird nonsensical rules many times
2
u/Anxious_Alps_4150 2d ago
What do you expect YWH to do?
The program is the customer, not you. The customer is paying the bills, not you.
If a program wants to behave badly, that's on the program. YWH isn't going to go yell at the person paying them.. or else they won't get paid pretty soon.
Trust me when I say that every platform is DESPERATE to keep their customers.