HackerOne pays out $20,000 after ‘sloppy’ breach

A HackerOne community member is being paid $20,000 for finding a vulnerability in its own website.