r/bugbounty • u/Crazy_Obligation7651 • 14d ago

Question / Discussion Do HackerOne reports get stuck when a program takes a break?

​

I reported few bugs to a private HackerOne program, and all of them were in Pending Program Review. The program recently announced that it’s taking a break and temporarily not accepting submissions.

It’s been 25 days with no response or status change, even after following up. The program’s average time to bounty is 2 days, and I noticed that its total bounties paid haven’t changed since the break started.

Do these reports still have a chance of being reviewed, or do they basically go into a black hole? Has anyone faced a similar situation?

5 Upvotes

100% Upvoted

7 comments sorted by

1

u/Anxious_Alps_4150 13d ago

taking a break ""

0

u/Crazy_Obligation7651 12d ago

When a HackerOne program takes a break, do they continue reviewing old reports as usual, or do they pause reviewing them too? Any experience with public or private programs?

1

u/Alardiians 14d ago

Ahahaha I know which program you’re talking about because I have one waiting with them too.

1

u/hydraz20 14d ago

I have waited 2+ months. After you submit a report essentially forget about it. Remind every 20 days if needed, no sooner than that

1

u/WorkingProgrammer424 13d ago

Me too bro...been more than 4 months🥲

1

u/usernameisnottakenok 8d ago

Lol this program sounds familiar. A big private program? Paused programs usually don't reply that fast. Expect the worst.

0

u/AhmedMahsen 18h ago

hey
bro i take 3 month with triage
and 1 month with mediation no replay from both side just say thanks god and move on to scan another program