- How you keep the consistency
- On average, how many hours per day did you spend bug hunting throughout the year?
- Did you achieve your bounty Goal and How much you got the bounty
So here is the write about all of those question/answers and some my thought
Before starting: This article doesn't reveal any bounty figures or technical details. It's simply a collection of general questions and answers based on my personal bug-hunting experience.
When you realize that you can achieve many things and become whoever you want to be, one truth becomes very clear: the only thing stopping you is you. There is no shortcut and no alternative — you have to show up every single day.
I started this journey on 23 December 2024. For the first 30 days, I kept jumping from one program to another, submitting reports, getting duplicates, and sometimes receiving no response at all. Within the first one or two months, I didn't achieve my goal. But I chose not to stop. I continued with the same energy and belief.
Every day, I spent around 5–6 hours bug hunting, no matter what was happening in my life. That was my mindset: I have to do it. This mindset kept me alive and moving forward. There were days when I felt extremely sleepy after lunch, but I still pushed through — and interestingly, most of my bugs were found either in the morning or right after lunch.
Throughout this journey, I learned one powerful lesson: consistency plus luck beats everything.
My daily routine was simple but strict. I woke up around 5:45 AM, went to the gym with my friend without tea or anything else, and returned home around 7:15 AM. After a cup of tea, I opened my laptop and hunted until 12:00 PM. I rested after lunch, then started again around 2:00 PM. After a short evening break, I resumed hunting until night and then went to sleep.
This routine repeated every single day, without changes
Throughout this journey, I focused on one specific vulnerability type — just a single class of bug. Over time, I submitted 400+ reports. Most of them were valid, while some ended up as duplicates or not applicable, which is part of the process.
After March, I made another important change: instead of jumping between many programs, I narrowed my focus to just two programs. I divided my time equally between them, spending around 3 hours on each program every day. That focus helped me go deeper instead of wider, and my learning curve improved significantly.
You might think I got lucky — that I stuck to a private program because things were going well. That's not true. In the beginning, more than 20 of my reports were marked as duplicates straight away.
The only reason I kept hunting on that program was something unexpected. My very first report was a duplicate, but the dev team still decided to reward me. They said:
"I noticed the note about the duplicate issue submission. I've added a $100 reward for your effort — appreciate your work, and I hope you uncover more findings in the future."
That single response changed everything for me
When it comes to my goal, yes — I achieved it. In fact, I went beyond it and ended up hitting 2× of what I originally aimed for
So if you want to build consistency, start with just 2 hours a day. Then slowly increase it by 10–15 minutes every day.
Even on days when you don't feel like hunting, still sit for those 2 hours. If you can't hunt, read something, watch a talk, or listen to a criticalthinkingpodcast. The goal is to show up — even on low-energy day
Thanks for reading.
This story is told by me and written with the help of ChatGPT.