Stray GitHub access token from Shopify earns novice bug bounty hunter $50k

The e-commerce technology supplier confirmed the issue and revoked the token before carrying out an audit that confirmed no unauthorized activity had occurred – allaying potential backdoor fears.