HM awards
The HM pool is reserved for valid medium and high findings. Payouts are based on weighted shares across the contest, not flat fixed amounts per report.
Researcher rewards and judge compensation are separated on purpose. Researchers earn from HM and QA pools. Judges earn from a dedicated judge pool. The rules below reflect the current payout logic used by the platform.
Researchers can earn from HM and QA pools. Judges earn from a separate judge pool. Keeping them separate makes the payout model easier to explain and easier to audit.
The HM pool is reserved for valid medium and high findings. Payouts are based on weighted shares across the contest, not flat fixed amounts per report.
The QA pool is split equally across all valid submissions. It rewards clear writeups, reproducibility, and overall reporting quality.
The judge pool is distributed according to judging workload. That keeps review compensation separate from the researcher prize pool.
Researchers do not rely on one undifferentiated bucket. Severity-based rewards and quality-based rewards are calculated differently and paid from different pools.
Only valid submissions can participate in researcher payouts.
Valid medium and high findings enter the HM share calculation. Duplicates join the same finding group.
Every valid submission also shares the QA pool equally, including valid duplicates.
The judge pool is split proportionally by the number of judgements each judge made on valid submissions. That keeps judge compensation visible and separate from researcher rewards.
Sample split
If three judges contributed 8, 4, and 2 judgements, the judge pool would be split in the same 8:4:2 ratio.
8 judgements
4 judgements
2 judgements
The page below summarizes the actual payout rules used by the current pool-based distribution logic.
researcher_payout = hm_pool * (researcher_shares / total_hm_shares)Current share rule: researcher_shares = (severity_weight * 0.9^discovery_count) / discovery_count. In the current pool logic, medium uses weight 3 and high uses weight 10.
qa_payout = qa_pool / valid_submission_countThe QA pool is split equally across all valid submissions. A duplicate that remains valid still participates in QA.
judge_payout = judge_pool * (judge_judgements / total_judgements)The current logic counts each judge's judgements on valid submissions, then splits the judge pool proportionally.
No. Duplicate findings share the finding's HM weight instead of triggering a second full HM payout. Valid duplicates still participate in QA.
No. The current HM pool logic is reserved for valid medium and high findings. QA can still reward valid submissions separately.
Judges are paid from a dedicated judge pool based on their judgement count on valid submissions. Their compensation does not come out of researcher pools.
Invalid submissions do not participate in HM or QA payouts. Researcher payouts only apply to submissions marked valid.
The payout page explains who gets paid. The pricing page explains what the client is charged.