I stopped hunting on HackerOne after years because they stole my $50k | Hacker News Reader

I stopped hunting on HackerOne after years because they stole my $50k

medium.com

7 pointsf311a6 comments

HackerOne didn’t steal the funds, author clearly states the funds are on hold, just not transferable due to the sanctions on Russian and Belarusian banks.

Author should be focused on understanding the sanctions as they relate to his situation; in my opinion, if possible, he needs to leave Russia as soon as possible.

There are no sanctions that prevent wire transfers. Only goverment related banks are sanctioned.

Not expert, but quick Google shows it’s complex, and 100% based on author’s situation; for example, sending $1000 is not the same as $50000 and intentionally breaking up transfers to get around limits might be illegal. For example, here’s just one website trying to explain ways of sending money:

https://moneytransfers.com/send-money/russia

HackerOne would have to understand long list of possible situations of each hacker being paid that’s subject to the bans and individually deal with them while taking on the risk they somehow made a mistake.

Author might not be responsible for the situation that produced the bans, but again, solution is to leave Russia, or at least take on the responsibility of finding a non-Russian financial institution they are able to open an account with to legally get payments and then find a legal way to transfer the funds to Russia.

He wrote that the 50k was for 10 different bug bounties so splitting it up according to those bounties wouldn’t necessarily be “intentionally breaking up transfers to get around limits”.

Point was not to give specific advice or understand the specifics of the author’s situation, but to say, it’s their responsibility to sort it out, not HackerOne. He obviously would rather spend time trying to make others be responsible for fixing his issues, than just figure it out himself. HackerOne more than happy to send him the funds to a financial institution that’s legal to do so that already fits within their pay out offerings.

HackerOne has _no_ obligation to try to sort this out? Frankly I think it is largely their responsibility. They agreed to pay him. They should be trying to meet that agreement. Instead they are apparently ignoring his communications (which of course is not required by any legislation). Frankly the way they're acting is disgraceful. I don't understand how you can defend them.

Reply on news.ycombinator.com