@rafabd1 submitted 2026-06-03
response medium triage average payment good scope good
The X team is quite receptive to valid vulnerabilities, though in some cases they end up marking real flaws as 'by design', even though their communication is transparent about the reason. In my experience, they have also paid a small bonus when the issue was valid but already known internally.