What should we understand? It looks like the H1 account is the actual company, a...

forty 11 months ago | parent | context | favorite | on: Coinbase awarded a $500k bug bounty

What should we understand? It looks like the H1 account is the actual company, at least they link to their website. Is the company doing bug bounty? Or is this a creative way to pay for an audit?