resolved bugs in a program are public despite the program settings

Summary

This researcher reported this issue to us on another account, and while the bug was valid, the researcher then asked for the bounty to paid to another account than the one used to report the issue originally. This was clearly an attempt to bypass our reputation system and is a direct abuse of our multiple account policy. While HackerOne does allow you to have multiple accounts, we do not allow you to submit reports on behalf of other accounts that you own to manipulate reputation.

We originally determined that we would not award a bounty for this type of behavior, but then retracted this decision in favor of rewarding the researcher for the bug because it was determined to be valid. Let it be clear that this was a one time exception, and we do not condone this type of behavior. The researcher has deactivated the other duplicate account that was used.

Please review our multiple account policy here: https://support.hackerone.com/hc/en-us/articles/208135543

while searching for bugs on hackerone I had to create another account for testing purposes only and while doing that I found this bug so I reported it immediately from my other account without paying attention, so I asked to be rewarded here but the team refused to and considered that as an attempt to bypass the reputation system although I didn't have any bad intentions to abuse it and after some talking they decided to reward me here and make a one time exception, thanks hackerone especially @coffeecup :)