Between 2014 and 2016, I was listed on Facebook’s Whitehat “Thanks” page for reporting multiple security vulnerabilities affecting the platform.

At the time, this page publicly acknowledged security researchers who contributed to improving Facebook’s security. My name, Khalil Shreateh, appeared across multiple years, reflecting over 10 reported vulnerabilities.

Today, those entries are no longer visible.

Evidence from Archived Records

Using the Internet Archive (Wayback Machine), older snapshots of the original “Thanks” page confirm that my name was publicly listed.

For example:

• 2014 — listed
• 2015 — listed
• 2016 — listed

These records demonstrate that my contributions were once recognized publicly by Facebook.

What Changed?

Since then, Facebook—now Meta Platforms—has migrated its bug bounty program to a new platform and leaderboard system.

During this transition:

• The original “Thanks” page was deprecated
• Data appears to have been restructured or filtered
• Some historical entries, including mine, are no longer visible

Facebook Leaderboard : https://bugbounty.meta.com/leaderboard/?league=&year=2016

The Problem

While other researchers from the same period still appear in public listings, my name has been removed from those years.

This raises important questions:

• Why were some contributors preserved while others were not?
• Were all historical records migrated accurately?
• Is recognition now limited to a different set of criteria than before?

Why This Matters

Bug bounty programs are built on trust and transparency.

Public recognition is not just symbolic—it reflects:

• contribution history
• professional credibility
• and a researcher’s impact on platform security

When historical acknowledgments disappear without explanation, it creates confusion and undermines confidence in the system.

A Respectful Request

This article is not written as an accusation, but as a request for clarification.

I respectfully ask the Facebook (Meta) security team to:

• Review historical Whitehat acknowledgments from 2014–2015-2016
• Verify whether contributions were correctly migrated
• Clarify the criteria used for public recognition today

If my contributions are still recorded internally, I would appreciate them being properly reflected publicly as they once were.

Security research is built on responsible disclosure and collaboration.

Recognition—especially when already granted—should remain consistent over time.

I remain supportive of Facebook’s security efforts and hope this issue can be clarified transparently.

— Khalil Shreateh

 Archive date : Oct-30-2016 source :   https://web.archive.org/web/20161030064713/  https://web.archive.org/web/20161030064713/

Written by Khalil Shreateh Cybersecurity Researcher & Social Media Expert Official Website: khalil-shreateh.com