HackerOne has paid out $20,000 to a bounty hunter who discovered a session cookie issue, due to “human error,” on the bug bounty platform.
Source: Threadpost