Security Researchers Identify Over 200 Vulnerabilities in Max Messenger, Earning Nearly $300K

• April 11, 2026

Security researchers have uncovered a total of 213 vulnerabilities in the Max messenger, a national messaging platform. These findings were made during an ongoing bug bounty program launched on July 1, 2025, which incentivizes ethical hackers to identify and report security issues.

The program, which has been active for several months, has resulted in rewards totaling nearly 22 million rubles, equivalent to approximately $300,000. The initiative aims to bolster the security of the messenger by leveraging the expertise of the white hat hacking community.

Extensive Testing Yields Significant Security Insights

Details about the discoveries were shared by Aleksey Batyuk, the technical director at Positive Technologies overseeing development in the government sector. He made the announcement at the international communication exhibition “Связь-2026.” Positive Technologies, known for its focus on cybersecurity solutions, has played a key role in facilitating the bug bounty engagement.

While specific technical details of the vulnerabilities identified were not disclosed, the large number of reported issues highlights both the complexity and the critical importance of continuous security assessments for messaging applications, particularly those used for national communication purposes.

The Max messenger’s bug bounty program stands as an example of how coordinated efforts between government entities and cybersecurity experts can enhance software protection measures. By rewarding ethical hackers for their contributions, the program encourages responsible disclosure and helps mitigate potential threats before exploitation occurs.

With cyberattacks becoming increasingly sophisticated, such proactive security strategies are essential to maintaining trust and safeguarding user data. The Max messenger’s continued vulnerability assessments through organized programs like this offer a roadmap for similar platforms aiming to improve their defense mechanisms.

White hat hackers found 213 security flaws in the Max messenger as part of a bug bounty initiative, receiving close to $300,000 in rewards.