SECURITY RESEARCHER PROGRAM

🏆 Security Hall of Fame

Honoring security researchers who help safeguard BotDigit. Acknowledged security researchers may receive official recognition including Letters of Appreciation, verifiable certificates, Security Researcher badges, and, where the finding qualifies under the applicable Bug Bounty Program Terms, BotDigit Wallet Top-Up Credits.

Official Letter of Thanks Verified Security Auditor Badge Wallet Top-Up Bounty Rewards

Recognizing Responsible Security Disclosures

Recognizing researchers who responsibly identify and disclose security vulnerabilities that help strengthen BotDigit. Researchers with validated findings may receive formal recognition, certificates and Security Researcher credentials. Monetary or Wallet Top-Up rewards are subject to the applicable Bug Bounty Program Terms and the final eligibility determination for each finding.

Honor Roll(4 Researchers)

Validated Security Contributors

Nishant Lungare

Verified Security Auditor Multi-Award Contributor
@royniss8990• Joined 2026• 3 Valid Security Findings• 3 Issued Certificates
Highest Validated Impact🔴Critical Severity
Contribution Breakdown
2 Critical1 High
Official Recognition Letter of Thanks Issued
Reward Status Recognition Awarded
Validated Vulnerability Disclosures & Associated Awards (3):All Findings Safeguarded
🔴 CriticalRef: SEC-BUG-245403• Issued September 2026🏆 Recognition Awarded

“Non-rate-limited 6-digit email verification code enables account pre-hijacking”

🔴 CriticalRef: SEC-BUG-921961• Issued August 2026🏆 Recognition Awarded

“Unauthenticated CRM API exposes and mutates cross-tenant sales leads”

🟠 HighRef: SEC-BUG-633618• Issued August 2026🏆 Recognition Awarded

“Distinct login/registration errors enable unauthenticated account enumeration”

Sakar Bhandari

Verified Security Auditor Multi-Award Contributor
@sakarbhandari55• Joined 2026• 2 Valid Security Findings• 2 Issued Certificates
Highest Validated Impact🟠High Severity
Contribution Breakdown
1 High1 Medium
Official Recognition Letter of Thanks Issued
Reward Status Recognition Awarded
Validated Vulnerability Disclosures & Associated Awards (2):All Findings Safeguarded
🟠 HighRef: SEC-BUG-120013• Issued September 2026🏆 Recognition Awarded

“Missing Rate Limiting on Verification Endpoint Causes Service Degradation”

🟡 MediumRef: SEC-BUG-925774• Issued September 2026🏆 Recognition Awarded

“Missing Rate Limiting on Verification Endpoint Causes Verification Service Degradation”

Tarun Sharma

Verified Security Auditor
@tarun• Joined 2026• 1 Valid Security Finding• 1 Issued Certificate
Highest Validated Impact🟠High Severity
Contribution Breakdown
1 High
Official Recognition Letter of Thanks Issued
Reward Status Recognition Awarded
Validated Vulnerability Disclosures & Associated Awards (1):
🟠 HighRef: SEC-BUG-549806• Issued August 2026🏆 Recognition Awarded

“Uncaught Server Exception on AI Chat Session Initialization”

Yahya M. Mirza

Verified Security Auditor
@yahyamirza300• Joined 2026• 1 Valid Security Finding• 1 Issued Certificate
Highest Validated Impact🟠High Severity
Contribution Breakdown
1 High
Official Recognition Letter of Thanks Issued
Reward Status Recognition Awarded
Validated Vulnerability Disclosures & Associated Awards (1):
🟠 HighRef: SEC-BUG-366673• Issued August 2026🏆 Recognition Awarded

“AI Assistant Prompt Injection & Credential Metadata Disclosure”

Security Researcher Recognition

Program Perks

Every security researcher with a validated finding receives official recognition from BotDigit Security Operations:

✉️ Official Letter of Appreciation

Formal recognition from BotDigit Security Operations acknowledging the research contribution.

📜 Verifiable Security Certificate

Certificate with a public verification page and QR verification where applicable.

🛡️ Security Researcher Badge

A verified badge associated with the researcher's BotDigit profile when eligibility requirements are met.

💳 Wallet Bounty

Eligible findings may receive BotDigit Wallet Top-Up Credit according to the applicable Bug Bounty Program Terms.

4

Researchers

7

Total Valid Reports

6

High / Critical

7

Verifiable Certificates

Want to Join the Hall of Fame?

Submit a responsible disclosure through the BotDigit Bug Bounty Program. Researchers with validated findings may be eligible for Hall of Fame recognition, security certificates and other program benefits.

View Bug Bounty Program
HomeJobs
Get Started
ExploreSign In