Capcut Bug - Bounty [better]

🚨 🚨

Drop links below. ⬇️

If ByteDance is listening: A clear rewards framework for CapCut would attract top talent before attackers find the low-hanging fruit. 🍍 capcut bug bounty

As CapCut's user base explodes (surpassing Premiere Rush in mobile downloads), its security posture remains a black box to the research community.

#BugBounty #InfoSec #EthicalHacking #ByteDance 🚨 🚨 Drop links below

I’ve been fuzzing the CapCut web editor (capcut.com) and found what looks like a potential IDOR on project draft IDs. Before I go further, I want to make sure I'm following responsible disclosure.

With millions of creators storing drafts & data on ByteDance servers, the attack surface is MASSIVE. capcut bug bounty

Before I disclose: Is there a private HackerOne/third-party program, or are we going straight to VDP? 👀