Bug Bounty Field Notes #2 – A Shopify Bug That Should’ve Been Accepted

In this video, I break down a bug I reported to Shopify that was ultimately marked Informative.

The focus of this episode is the actual behavior I found:

Where the bug existed in the application

What the application allowed that should not normally be possible

Why the behavior mattered from a security and abuse perspective

The exact reason Shopify classified it as Informative

I avoid sharing exploit steps or anything sensitive. The goal is to clearly explain what the bug was, why it stood out, and how Shopify evaluated it.

This is a realistic look at how high-maturity programs handle edge-case issues that sit in a gray area between “bug” and “expected behavior.”

If you’re hunting on large programs or trying to understand how triage decisions are made, this breakdown should help sharpen your testing and reporting.

#bugbounty #cybersecurity #ethicalhacking

Видео Bug Bounty Field Notes #2 – A Shopify Bug That Should’ve Been Accepted канала LoganSec