🚀 This feature is coming soon.
What are the YesWeHack Credits?
YesWeHack Credits is a system designed to help maintain report quality and keep the triage process efficient.
It ensures that serious security researchers are rewarded for submitting relevant, well-qualified reports while speeding up the triage pipeline.
As a new hunter on YesWeHack, you start with credits when you create your account. Each Bug Bounty and Featured VDP program has a submission cost. Use these credits to submit vulnerability reports on the YesWeHack platform.
Submit valid reports to earn bonus credits and keep reporting vulnerabilities. You can view your credit balance and transaction history directly in your user account.
Report submission process
ℹ️ To know how to submit a report, click here.
Go to “My programs” [Note: The credit cost of a submission is displayed on each program card.]
Open a Bug Bounty program
ℹ️ Learn more about how to select a Bug Bounty program here.
Each program includes a “Credits” section that displays the cost of a submission
⚠️Warning messages
If your Credit balance is low, a message will appear in the Credit section. Submitting an invalid report may result in the loss of all credits and the inability to submit further reports:
If your credit balance is insufficient, an error message will inform you that you need more credits to submit a report to the program:
Once your vulnerability report has been submitted, a credits table appears in the report. It details the number of credits you can earn or lose based on the report status (e.g., Accepted, Informative) and the severity (e.g., Critical, High):
Outcome by status
Status | Credit |
New (ie. when submitting a report) | -1 * Submission cost |
Accepted, Resolved | +2 * Submission cost |
Informative, Won’t fix | +1 * Submission cost |
Duplicate | +1 * Submission cost |
Autoclose | +1 * Submission cost |
NMI, Under Review | 0 * Submission cost |
RTFS | -1 * Submission cost |
Invalid, OOS, N/A | -1 * Submission cost |
Spam | -2 * Submission cost |
Examples:
If submitting a report costs 2 credits and the report is marked as Accepted, the hunter is awarded +4 credits. The report therefore results in a net gain of +2 credits.
If submitting a report costs 3 credits and the report is marked as RTFS, the hunter is not refunded and only the submission cost applies. The report therefore results in a net cost of -3 credits.
ℹ️ If the report is autoclosed, the hunter is reimbursed for the submission cost.
Bonus credit by severity
Severity | Credit |
Critical | +3 * Submission cost |
High | +2 * Submission cost |
Medium | +1 * Submission cost |
Low | 0 * Submission cost |
None | 0 * Submission cost |
Examples:
If submitting a report costs -2 credits and the report is accepted, the hunter is awarded +4 credits. If the report severity is Critical, the hunter also receives +6 credits. The report submission therefore results in a net gain of +8 credits.
If submitting a report costs -3 credits and the report is accepted, the hunter is awarded +6 credits. If the report severity is Low, the hunter does not receive any additional credits. The report submission therefore results in a net gain of +3 credits.
ℹ️ Notes:
Bonus credits are sent at the same time as the reward.
Hunters who collaborate on a report submission don't earn or lose credits.
The reports list shows your submitted reports and their associated credits
Credits balance
Check your credit balance in your user account. You can also view your credit history, which shows your submission costs and credit earnings.
Open the top-right dropdown menu
Click on “Credits”
Can I receive additional credits?
An automatic credit refill is granted once per hunter. You are eligible if your credit balance remains at or below 2 YesWeHack credits for at least 15 days.
Prerequisites:
You have no open reports.
You have not previously received a credit refill.
Example:
If you have 2 credits for 15 days, you will be credited by +10 additional credits. bringing your total to 12 credits after the credit refill.