Back to Decathlon’s Live Bug Bounty

Decathlon partnered with YesWeHack to run a Live Bug Bounty at the International Cybersecurity Forum, where ethical hackers identified multiple security issues—including IDORs, SQL injection, and an RCE—affecting the OneShop e‑commerce platform and authentication/loyalty services; 64 reports were triaged, 27 accepted (3 critical), patches were started during the event, and the teams maintained an average response time of ~1 hour 06 minutes.