Verified65% confidenceFactExact time
Most domestic SRC platforms classify vulnerabilities into four levels—critical, high, medium, and low—and at certain leading internet companies, a single critical vulnerability can yield rewards of tens of thousands of yuan, while low-severity vulnerabilities may only receive point rewards of a few dozen to a few hundred yuan.
3
Sources
65%
Confidence
Medium-term (~90 days)
Relevance
8/19/2026
First Seen
Valid until: 11/17/2026
Sources
AI自动挖漏洞真能躺赚?理性看待SRC白帽挖洞的真相
Related Claims
UnverifiedVulnerabilities are typically classified into four severity levels—low, medium, high, and critical—with bounties ranging from tens of yuan to tens of thousands of yuan.80% similarUnverifiedThe CVSS Common Vulnerability Scoring System classifies vulnerability severity into four levels: low, medium, high, and critical.71% similarVerifiedRepresentative domestic SRC platforms include Butian (operated by QiAnXin) and Vulbox, while internationally there are HackerOne and Bugcrowd.70% similarVerifiedSRC(安全应急响应中心)是企业设立的漏洞收集平台,企业付费购买未公开的安全漏洞,安全研究者发现并提交后审核通过可获得赏金68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/775815API
curl https://kongchang.com/api/v1/knowledge/claims/775815MCP
get_claim(id=775815)