u/Dizzy_Seaweed_2756

Hi everyone,

​I currently have 3 reports that have been stuck in the "Under Review" status since May 1st. It’s been about two weeks now without any update or change in status.

​I’m starting to wonder if this is a normal timeframe for most programs or if I should reach out for an update? For those of you who have been in the game for a while:

​What is the average time you usually wait for a triager to move from "Under Review" to a final decision?

​At what point do you consider a report "stagnant" and decide to ping the team?

​I’d love to hear about your experiences with response times lately. Thanks!

Title says it all. I want to hear from the community: In your experience, what is the most common factor that causes a report to lose its value during the triage process?

​On the flip side, what’s the best way to "force" an upgrade through a better PoC or impact description?

Hi everyone,

I’m a bit confused about how the points system works on YesWeHack and would appreciate some clarification.

My situation:

My current total reputation is 100 points.

In my dashboard, I have 0 Accepted reports.

I have one report closed as Informative (CVSS 9.8).

I have another high-impact report (Authentication Bypass, CVSS 9.3) which is currently "Under Review".

My question is: How did I reach 100 points if the Critical report is still Under Review and not officially "Accepted" yet? According to the documentation, points are awarded when a report is "Validated." Does this mean my report has already passed the technical validation and I'm just waiting for the bounty/status update?

Is it possible for the points to be revoked if the report ends up being closed as something else later?

Thanks in advance for your help