Oath’s Big Year of Bug Bounties Capped off with NYC Live Hacking Event

HackerOne and Oath recap their h1-212 live hacking event and 2018 bug bounty results, noting over 1,900 valid vulnerabilities reported in 2018 and $5M paid in bounties; the three-day event produced 159 vulnerabilities and $404,764 in awards. The post highlights team-based findings (including a critical bug enabling unlimited subdomain creation and valid SSL issuance that could facilitate phishing) and emphasizes collaboration, recruitment, and responsible disclosure rather than an active compromise.