Unverified50% confidenceOpinionExact time
在真实SRC或漏洞赏金平台成功挖出并提交通过审核此类漏洞，拿到500元甚至更高赏金属于常态
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/9/2026
First Seen
Valid until: 1/7/2027
Sources
Related Entities
Related Claims
UnverifiedUP主曾在某SRC平台挖到一个任意用户登录漏洞，获得1000元的严重赏金78% similarVerifiedMost domestic SRC platforms classify vulnerabilities into four levels—critical, high, medium, and low—and at certain leading internet companies, a single critical vulnerability can yield rewards of tens of thousands of yuan, while low-severity vulnerabilities may only receive point rewards of a few dozen to a few hundred yuan.78% similarVerifiedSRC（安全应急响应中心）是企业设立的漏洞收集平台，企业付费购买未公开的安全漏洞，安全研究者发现并提交后审核通过可获得赏金72% similarUnverifiedSRC has built a closed loop of discovering vulnerabilities, reporting vulnerabilities, and fixing vulnerabilities, while also providing white-hat hackers with a legal channel for monetization.71% similarUnverified漏洞赏金计划由HackerOne、Bugcrowd等平台承载，企业通过设置奖金激励白帽黑客挖掘漏洞71% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/991177API
curl https://kongchang.com/api/v1/knowledge/claims/991177MCP
get_claim(id=991177)