September 10, 2026

Capitalizations Index – B ∞/21M

Coinbase Pays $30k Bounty for a Critical Vulnerability on its Platform

Coinbase Pays $30k Bounty for a Critical Vulnerability on its Platform

Coinbase, one of the leading cryptocurrency trading exchanges, submitted a $30k bounty on HackerOne for a fix to a critical issue found on its platform. This, according to a report by The Next Web, published February 13, 2019.

A Severe Vulnerability

According to The Next Web, Coinbase‘s vulnerability was submitted on a disclosure program on HackerOne, a hacker-powered security consultancy firm. At the time of writing the issue was already fixed according to a Coinbase representative who was not able to provide any more details.

The official report on the matter in only for internal access, but considering how fast the exchange acted to submit the bug hunt on HackerOne, the issue must have been pretty severe.

Bug Hunt Rewarding System

Coinbase has its own Bug Bounty Program launched in 2014 where it pays depending on the impact of the bug found. The impact of an issue has several measures going from, $200 for low, $2,000 for medium, $15,000 for high, and $50,000 for critical impact.

Anyone can submit a report when finding a bug. Once the bug report is confirmed it becomes eligible for bounty and the hunter finding it is awarded accordingly. Hunters participating on the bug hunt need to abide to certain rules. The Coinbase Bug Bounty Program terms states:

In order to be deemed valid, a report must demonstrate a software vulnerability in a service provided by Coinbase that harms Coinbase or Coinbase customers. Coinbase awards bounties based on the severity of the vulnerability. We determine severity based on two factors: impact and exploitability.

There are several terms on the bug bounty program that specify how the different types of bug submissions should be characterized and rewarded. In order for a submission to qualify as a critical impact bounty, several terms need to be met.

But this issue was not the only issue found by the exchange, as Coinbase also paid for three more bounties marked as low-impact attack vectors this week.

Not only Coinbase

While blockchain technology promises to bring the security of the future it doesn’t mean that is safe from critical issues. Akin to this last bounty, last year Coinbase also awarded a $10,000 bounty. This turn the award went to researchers who found a bug that made it possible to reward oneself with all the ether you could get.

Nonetheless, Coinbase is not the only company having issues with its platform as this is an issue that is present throughout the ecosystem.

Getting Rich through Bug Bounties

According to The Next Web, in 2018 hackers were able to harvest around $878,000 from blockchain-related bug bounties while EOS developer Block.one has already paid more than $80,000 in bug bounties in 2019 alone.

Like BTCMANAGER? Send us a tip!
Our bitcoin Address: 3AbQrAyRsdM5NX5BQh8qWYePEpGjCYLCy4

Published at Fri, 15 Feb 2019 07:00:29 +0000

Previous Article

5BTC – 10mins hacked Script Blockchain unconfirmed bitcoin transactions

Next Article

Brave: Blockchain Marketing Tech Has Grown More Than Tenfold

You might be interested in …

[updated] ethereum pos: casper ffg in depth

[Updated] Ethereum PoS: Casper FFG In Depth

[Updated] Ethereum PoS: Casper FFG In Depth Presentation chat log: https://gist.github.com/karlfloersch/8953f7fe3e8fe9cc5d01e78520caf88a Slides: https://docs.google.com/presentation/d/1fqnjL-2TqXjhHx8k7HRX7eUYnDK83adnlCLLH8Bk054/edit?usp=sharing – Karl Floersch

NextBlock CEO Alex Tapscott Cancels Plans to Go Public and Will Return Money to Investors

Tapscott

Alex Tapscott, CEO of NextBlock Global, a venture capital company investing in blockchain technologies, announced in a press release yesterday that he is canceling their plans to go public through a reverse takeover (RTO) of Nobelium Tech Corp., a company listed on the Toronto Stock Exchange (TSX).

Tapscott said the young company had “stumbled” in falsely listing some crypto and blockchain experts as members of the firm’s advisory board. He is currently talking to NextBlock investors to work out how to return their original investments and to “rebuild the trust of those [they] have disappointed.”

NextBlock Global raised $20 million in their initial oversubscribed fundraising in July 2017 and had hoped to raise $100 million in the public offering. They planned to invest in digital currencies, blockchain hosting platforms and blockchain-based applications.

CIBC and investment bank Canaccord Genuity (a former employer of Tapscott’s) were underwriters on the deal, but CIBC pulled its support from the young venture capital firm amid the allegations.

According to BNN, clients of CIBC received an email saying, “CIBC has withdrawn as an agent from the NextBlock Global Limited private placement.” CIBC was not available for comment.

Sources have told BNN that Canaccord Genuity remained in the deal.

An article in Forbes last week detailed complaints from Kathryn Haun, Vinny Lingham, Dmitry Buterin and Karen Gifford that Tapscott had circulated an investor deck that incorrectly listed them as members of the NextBlock advisory board.

Dmitry Buterin, co-founder of Blockgeeks and father of Ethereum co-founder Vitalik Buterin, was included in at least one draft of the investor deck. He told bitcoin Magazine in a recent interview what had happened. He recounted:

“It’s pretty simple. Alex asked me to be an advisor, I declined. Then I got a deck forwarded to me which listed me as an advisor. It was forwarded to me by investors who received it from Alex.”

Buterin said he had met with Tapscott to let him know he wouldn’t be on the advisory board:

“We had a meeting and I was not convinced that they have the right resources to pull this off.”

When Is an Advisory Board Not an Advisory Board?

A thread on Twitter about NextBlock recently included some comments about how advisory boards have become routine and are often used as window dressing for making ICO pitches and, therefore, they aren’t really “advising” as such.

One user commented that likely only 50 to 60 percent of advisory boards are legitimate anymore, and put the NextBlock situation in a different light, implying that it’s become common practice to dress up a proposal with photos of known experts.

Amber D. Scott, CEO of Outlier Solutions, told bitcoin Magazine that she gets several requests a week to sit on ICO advisory boards. Scott explained that the conversation often goes like this:

ICO rep: “We saw you speak at an event and would love to add you as an advisor.”

Scott: “I’ve looked at your website/white paper and I’m not sure where you need compliance advice. Could you please elaborate on that?”


ICO rep: “You don’t actually have to do anything. We’ll just put your picture and bio on the website. You have a great name in the community.”


Andreas Antonopoulos, well-known author of “Mastering bitcoin,” says on his website that he does not accept invitations to sit on advisory boards and that he will not discuss projects publicly if he does work as an advisor.


Vitalik Buterin has also had to make it clear several times on Twitter that he is not an advisor for a number of firms that have touted his advice.


What could have been a major scandal for both the Tapscotts (father Don and son Alex) has been averted by this move, but how much long-term damage both NextBlock and the Blockchain Research Institute will sustain to their reputation remains to be seen.


The father-son Tapscott team co-founded the Toronto-based think tank Blockchain Research Institute, and co-authored the book “Blockchain Revolution: How the Technology Behind bitcoin Is Changing Money, Business and the World,” which has been translated into more than 20 languages.

The Blockchain Research Institute is holding a Members Summit this week in Toronto. Members of the think tank include CIBC, Microsoft, IBM, Fujitsu, Accenture, Tencent, Bell, Nasdaq, FedEx, Interac and the Governments of Canada and Ontario.

The post NextBlock CEO Alex Tapscott Cancels Plans to Go Public and Will Return Money to Investors appeared first on Bitcoin Magazine.