#POPO-payouts
sterile girder
Yes, @buoyant patrol and I work at Stripe
Hello! We actually try to keep personal info like names out of this chat so I will remove that last message
frigid vine
done,
The bug let you withdraw money, without even confirming transactions, it requires some fake info!
As you can see over there, i've withdrawn the money now Stripe can't have it back
Due to bank restrictions applied to those type of transactions
if used by someone with bad intentions can create a loss of millions to the company
Got there all the procedures, and the method was discovered by me.
sterile girder
Can you tell me how to reproduce this?
frigid vine
As I said before I need to talk with someone who's inside bug bounty program if you got any, or I need something more formal so I can report the problem
buoyant patrol
We don't have a bug bounty program, but you're welcome to write into support (https://support.stripe.com/contact) if you're not comfortable going into detail here
frigid vine
It's considered Critical ?
sterile girder
Sorry for the confusion. Let me know if you have any further questions
frigid vine
It's okay, didn't want to do directly with hackerone. Wanted something more easier to do, just a simple talk or an email that I can contact directly the department responsible for that