HeliosCore Gaslights Security Researcher, Retroactively Changes Bug Bounty Terms

Thu, 11 Jun 2026 19:04:26 +0000

HeliosCore Gaslights Security Researcher, Retroactively Changes Bug Bounty Terms

A researcher found a real vulnerability. HeliosCore said ’thanks,’ closed the ticket, changed the rules, and pretended it all made sense.

Let me tell you about a researcher who goes by Mr. Flat.

Mr. Flat doesn’t work for a mega-corp. Doesn’t have a sponsorship deal. Just a public fabrication bench, a neural-net connection, and the kind of patience that makes me genuinely hopeful about the galaxy. A few weeks ago, they discovered a man-in-the-middle attack vulnerability inside HeliosCore’s CoreSync utility — the software millions of people use to manage and overclock HeliosCore processing units from their mobi devices.

Vulnerability Disclosure on Cassette Future Magazine

HeliosCore Gaslights Security Researcher, Retroactively Changes Bug Bounty Terms

HeliosCore Gaslights Security Researcher, Retroactively Changes Bug Bounty Terms