A Deep Dive Into How Open-Source Project Maintainers Review and Resolve Bug Bounty Reports

Published in IEEE Symposium on Security and Privacy (S&P) 2025, 2025

Accepted at IEEE Security & Privacy 2025. Steven Ngo contributed to this work as a co-author.

Citation details and a link to the paper will be added once the camera-ready version is available.

Direct Link