Keybase received two reports for security issues in its app for Linux and macOS that led to privilege escalation on the system. For each of them, the developer paid a bounty of $5,000. The reports came via the HackerOne bug bounty platform, the first one submitted by Adam Chester on August 21 for the Keybase Desktop app for macOS. Another submission for the same type of bug from Rich Mirch, this time exploitable in the Linux version of the app. Public disclosure was delayed in order to allow several release cycles to emerge so users could update to newer versions.
Source: https://www.bleepingcomputer.com/news/security/keybase-pays-5-000-bounties-for-privilege-escalation-bugs-in-linux-and-macos-apps/

