One Million Dollars in Bug Bounties - Shopify
Apr 3, 2019

Summary
This post announces that Shopify's bug bounty program has awarded over $1M USD in bounties, making it the fifth public program on HackerOne to reach this milestone. It provides statistics on the program's success (over 950 bugs resolved, 750+ bounties awarded, 375+ public disclosures) and highlights three interesting resolved bugs: an SSRF leading to ROOT access, an admin authentication bypass, and a stored XSS vulnerability. It also mentions plans to experiment with new ways to drive hacker engagement and make the program more lucrative.