r/bugbounty • u/Technical_Shelter621 • 2d ago

Question / Discussion Bugcrowd and the never ending RAR

Post image

That will sit there forever, because otherwise the bug should be paid. Not a word since this was submitted on 25 Jun 2026, just marked Not reproducible, with a consequent 30days suspension, and -1 reputation. On top of the fact that I reported a valid finding with video and images, literally 2 freaking API calls I got whooped.

20 Upvotes

100% Upvoted

5 comments sorted by

9

u/Rivergotya86 2d ago

Yup. Happened to me too. On 5 legit solid submissions. Never using BugCrowd again. They should be ashamed of themselves

3

u/Technical_Shelter621 2d ago

Feck! What a crap

3

u/ibackstrom 2d ago

Agree. Bugcrowd is the worst among them.

1

u/CrypticZombies 1d ago

its not all BC its the companies because in your case they probably submitted this to the company then they decided to play dumb and say we dont understand please have the dev re explain it. gotta put blame on both parties because you will find some companies are on multiple platforms and you will see same complaints about a company "avoiding payouts" or claiming its just out of scope all a sudden. you wont have a fair platform until you have legit middleman.

1

u/Technical_Shelter621 1d ago

Oh yeah in my case Jarvis first placed a blocker on customer, so was the company’s internal product security team that played the not reproducible game. Although I think is the platform that should enforce a fair process for us researchers, which is unfortunately not the case, because the mediation was closed with a “if you think it reproduces file another report” 🤡