u/sloppy_joe6

Back in April I reported a bug to Binance's bug bounty program on Bugcrowd. It got triaged on May 5 and the fix was merged just 2 days later on May 7. It's now been 158 days with no monetary reward decision.

What I got instead:

- Five identical boilerplate holding responses over 5 months

- A RAR filed 45 days ago with zero Bugcrowd response

- Submission marked Resolved with only 5 auto-assigned points

- A commitment on August 26 to update severity after internal assessment which ofc didn't amount to anything

I've gone through every escalation path the platform offers. Has anyone dealt with Binance's program specifically taking this long? What actually moved things for you?