GitHub Slashes Bug Bounty Payouts, Launches VIP Tier

Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity level. Critical findings drop from $20,000-$30,000+ to a fixed $10,000, while a permanent invite-only VIP tier will pay $30,000 or more. Reports filed before that date retain previous payout terms.