Baemin offers rewards for finding security vulnerabilities, doubling the maximum payout from last year

[Financial News] Baedal Minjok is launching a vulnerability discovery program. Under the program, white-hat hackers will receive rewards for finding security flaws. As part of its effort to strengthen app security competitiveness, the company has decided to double the maximum reward from last year to encourage more white-hat participation.
According to the industry on the 31st, Woowa Brothers, the operator of Baemin, will run the Bug Bounty Program for three months from Sept. 14 to Dec. 13.
A bug bounty program rewards white-hat hackers who report security vulnerabilities in a company's services or products, with payouts based on the severity of the flaw. While conventional vulnerability assessments focus on checking standardized inspection items, bug bounty programs have the advantage of uncovering potential weaknesses that can only be found by understanding how a service works. Public institutions such as the Financial Security Institute and the Financial Supervisory Service, as well as major IT companies, also use this approach.
Last year, Baemin launched its first program in partnership with the bug bounty platform Findthegap. Through the program, it identified some vulnerabilities in key services within the Baemin app and improved security.
This year, unlike last year, Baemin will use only Findthegap's platform and will run the program itself. It has increased the number of services to be analyzed from three to six, and the maximum reward has also been doubled from last year.
Baemin plans to continue improving app security vulnerabilities by running its own vulnerability assessments alongside the bug bounty program.
Kim Jeong-hoon, chief information security officer at Woowa Brothers, said, "Through the operation of the bug bounty program, we want to cross-check our app security system and strengthen our security competitiveness." He added, "We will continue working to ensure that Baemin customers, riders and partners can use the app with confidence."

[email protected] Jang Min-kwon Reporter