HexBrain

Gratipay · Report #90805

change bank account numbers

Validstatus
mediumseverity
13upvotes
12 Jun 2017disclosed

How it was found

I leaked our bank account numbers for PNC and New Alliance in screenshots on https://github.com/gratipay/inside.gratipay.com/issues/308. They were up for about six days (and will have gone out in email to Gratipay contributors and watchers). I've removed the screenshots from the comments, but they're still up on the GitHub CDN.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original