Chase Sapphire Reserve℠

United’s Million-Mile Bug Bounty Paying Off for Some

This post contains references to products from one or more of our advertisers. We may receive compensation when you click on links to those products. For an explanation of our Advertising Policy, visit this page.

Per Twitter user (and newly minted MileagePlus millionaire) @psifertex, United Airlines appears to be making good on its promise to award users for submitting security bugs.

United issued 1,000,000 miles to at least one lucky bug submitter.
United issued 1,000,000 miles to at least one lucky bug submitter.

As a reminder, you can earn between 50,000 and 1,000,000 miles for submitting bugs. Miles are awarded according to the following criteria:

Low (50,000 miles)

  • Cross-site scripting
  • Cross-site request forgery
  • Third-party issues that affect United

Medium (250,000 miles)

  • Authentication bypass
  • Brute-force attacks
  • Potential for personally identifiable information (PII) disclosure
  • Timing attacks

High (1,000,000 miles)

  • Remote code execution

United bug bounty program

We have seen reports from members who have submitted legitimate bugs without receiving a response from United, but it appears that the airline may just be slowly working through a backlog. If you’ve submitted a bug for consideration, don’t give up hope just yet.

H/T: Wandering Aramean

Chase Sapphire Preferred® Card

Apply Now
  • Earn 50,000 bonus points after you spend $4,000 on purchases in the first 3 months from account opening. That's $625 toward travel when you redeem through Chase Ultimate Rewards®
  • 2X points on travel and dining at restaurants worldwide & 1 point per dollar spent on all other purchases.
  • Earn 5,000 bonus points after you add the first authorized user and make a purchase in the first 3 months from account opening
  • No foreign transaction fees
  • 1:1 point transfer to leading airline and hotel loyalty programs
  • Get 25% more value when you redeem for airfare, hotels, car rentals and cruises through Chase Ultimate Rewards. For example, 50,000 points are worth $625 toward travel
  • No blackout dates or travel restrictions - as long as there's a seat on the flight, you can book it through Chase Ultimate Rewards
Intro APR Regular APR Annual Fee Foreign Transaction Fee Credit Rating
N/A 16.24%-23.24% Variable Introductory Annual Fee of $0 the first year, then $95 0% Excellent Credit