Last2x week i just reported a blog website that has a multiple vulnerabilities and after i reported that their website has a multiple vulnerabilities. The website admin decided that instead he give me a bounty reward in paypal, he wrote a article that mentioning my pseudonym and give me a credit of what i just discovered in his website. The website that I’ve reported is DavaoBase.com
Not all website that are reported with vulnerabilities will give you a reward in money, some website administrator will wrote you a article that mentioning your name or they will put you in a hall of fame to their page for discovering some security holes. These are the priceless bug bounty and this is also a lifetime achievement.