Bug bounty program changes

What moved on public bug bounty programs, newest first. Cuts, removals and closures are confirmed on a second check before they show.

Updated 12 Nov 2026, 20:34 UTC

Last 7 days

Scope added: 258
Rewards raised: 4
Cuts and removals: 8
New programs: 0

Platform When Direction

443 changes

Wednesday, 4 November 17 changes

Inverse Finance 19:51

Scope + Sherlock

Added to scope: 0xD591d4573e867967596a934724AA8492b025A22c
Inverse Finance 19:51

Scope + Sherlock

Added to scope: 0x0c52fb9e292d66d5F72cf8b82A5377F1c62f61eE
Inverse Finance 19:51

Scope + Sherlock

Added to scope: 0xd22D0287c6aA9FC4D07e7e1a11BDcF2daad406b7
Inverse Finance 19:51

Scope + Sherlock

Added to scope: 0x529203f9F07c66d2D96812E3D942387312Fab0Ee
Henkel 16:25

Scope + HackerOne

Added to scope: *.purvala.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex-test.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex-dev.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.es
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.{cl,fi,nl,cz,sk,co.jp}
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.de
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplexusers.com
Henkel 16:25

Scope + HackerOne

Added to scope: *.opx.tc
Henkel 16:25

Scope + HackerOne

Added to scope: *.olaplex.co.nz
Henkel 15:15

Scope + HackerOne

Added to scope: *.olaplex.com
Unstoppable Wallet 12:54

Paused Immunefi

Paused. Not accepting reports right now.
Freshworks 09:23

Back HackerOne

Open for reports again.
Cvent Bug Bounty 03:16

Scope + Bugcrowd

Added to scope: https://accounts.app.cvent.com/paygo/signup

Tuesday, 3 November 19 changes

John Deere 22:15

Scope + HackerOne

Added to scope: jdsn-grr-api.deere.com
John Deere 21:45

Scope + HackerOne

Added to scope: cogi-ai-srv.ghns-web-platform-prod-standalone4.us.e00.c01.johndeerecloud.com
Equifax-vdp 20:34

Scope + HackerOne

Added to scope: http://promo.application.equifax.com
John Deere 20:15

Scope + HackerOne

Added to scope: warrantyelb.apps-qual-vpn.us.e06.c01.johndeerecloud.com
Hilton 19:26

Scope + HackerOne

Added to scope: hhibeachandtennis.com
John Deere 19:15

Scope + HackerOne

Added to scope: dmc.johndeere.com
John Deere 15:25

Scope + HackerOne

Added to scope: johndeere.my.cority.com
OpenAI 14:06

Scope − Bugcrowd

Removed from scope: https://chat.openai.com
OpenAI 14:06

Scope − Bugcrowd

Removed from scope: https://*.openai.org
OpenAI 14:06

Scope − Bugcrowd

Removed from scope: https://chatgpt.com/dots/
Origin Protocol 13:35

Scope + Immunefi

Added to scope: https://etherscan.io/address/0xa03360b3f6d902F1b3334c0adBd5C6995d3513fe
Origin Protocol 13:35

Scope + Immunefi

Added to scope: https://etherscan.io/address/0x03578bC4b5fB0cC0cA7A6AD05b06407ae6324a82
Origin Protocol 13:35

Scope + Immunefi

Added to scope: https://basescan.org/address/0x0F12256E27E658790C404C087C38ab4f34D53360
Signicat Responsible Disclosure 13:00

Scope + Intigriti

Added to scope: Signicat VideoID and SignatureID
Infomaniak Bug Bounty program 12:19

Scope + YesWeHack

Added to scope: s3.gva2.infomaniak.cloud
Infomaniak Bug Bounty program 12:19

Scope + YesWeHack

Added to scope: s3.gva1.infomaniak.cloud
Infomaniak Bug Bounty program 12:19

Scope − YesWeHack

Removed from scope: manager.infomaniak.com/*proxy*
Meesho 11:03

Cut HackerOne

Top reward $3,500 to $2,500.
Snapbytes Marketplace Managed Bug Bounty Engagement 01:01

Paused Bugcrowd

Paused. Not accepting reports right now.

Monday, 2 November 7 changes

MariaDB 16:22

Paused HackerOne

Paused. Not accepting reports right now.
Expedia Group Bug Bounty 16:02

Paused HackerOne

Paused. Not accepting reports right now.
Fresenius 13:42

Paused HackerOne

Paused. Not accepting reports right now.
Solidus 13:22

Back HackerOne

Open for reports again.
Attentia VDP 09:34

Paused Intigriti

Paused. Not accepting reports right now.
Beanstalk 06:03

Paused Immunefi

Paused. Not accepting reports right now.
Mt Pelerin 01:08

Cut Immunefi

Top reward $5,000 to $3,500.

Thursday, 29 October 3 changes

Stargate 19:38

Cut Immunefi

Top reward $10,000,000 to $3,500,000.
Dstny 12:49

Cut Intigriti

Top reward €1,697 to €1,500.
LayerZero 03:33

Cut Immunefi

Top reward $15,000,000 to $3,500,000.

Tuesday, 27 October 2 changes

Hyperbridge Protocol 16:11

Cut HackenProof

Top reward $50,000 to $10,000.
MagpieXYZ 00:20

Paused Immunefi

Paused. Not accepting reports right now.

Monday, 26 October 2 changes

Solidus 19:00

Paused HackerOne

Paused. Not accepting reports right now.
Venly 09:32

Back Intigriti

Open for reports again.

Friday, 23 October 2 changes

Thüringer Aufbaubank Bug Bounty Program 12:12

Cut YesWeHack

Top reward €7,000 to €3,500.
SP1 01:16

Cut Immunefi

Top reward $100,000 to $15,000.

Thursday, 22 October 2 changes

Voi Scooters 17:22

Paused Intigriti

Paused. Not accepting reports right now.
phpBB 08:46

Paused HackerOne

Paused. Not accepting reports right now.

Wednesday, 21 October 5 changes

Mail, Cloud and Calendar Mail.ru 16:11

Cut Standoff 365

Top reward RUB 3,600,000 to RUB 250,000.
Coinstore 13:32

Back HackenProof

Open for reports again.
Publitas 12:36

Back HackerOne

Open for reports again.
Algolia 12:16

Paused HackerOne

Paused. Not accepting reports right now.
Venly 10:13

Paused Intigriti

Paused. Not accepting reports right now.

Tuesday, 20 October 4 changes

Roblox 23:06

Cut HackerOne

Top reward $20,000 to $10,000.
Paxos Labs 15:20

Raised Immunefi

Top reward $100,000 to $500,000.
Paxos Labs 15:20

Back Immunefi

Listed again and open for reports.
Skoda Auto Bug Bounty Program 12:55

Back Intigriti

Open for reports again.

Monday, 19 October 3 changes

Social Deal 09:44

Raised Intigriti

Top reward €750 to €1,000.
GoCardless Bug Bounty Program 08:19

Back HackerOne

Open for reports again.
Ezviz - Bug Bounty Program 02:58

Cut YesWeHack

Top reward $5,000 to $420.

Friday, 16 October 2 changes

BloFin Web & Mobile 17:31

Raised HackenProof

Top reward $4,000 to $10,000.
Pyth Network 16:16

Cut Immunefi

Top reward $250,000 to $125,000.

Thursday, 15 October 7 changes

Lombard Finance 15:51

Raised Immunefi

Top reward $250,000 to $500,000.
Veriff Bug Bounty 14:23

Cut Intigriti

Top reward €6,000 to €4,000.
MagpieXYZ 12:22

Cut Immunefi

Top reward $200,000 to $50,000.
MariaDB 10:56

Back HackerOne

Open for reports again.
Flow Protocol 09:51

Cut HackenProof

Top reward $25,000 to $10,000.
Cetus Smart Contracts 09:00

Raised HackenProof

Top reward $300,000 to $1,000,000.
Hotcoin Web & Mobile 02:47

Raised HackenProof

Top reward $1,000 to $2,000.

Wednesday, 14 October 4 changes

Balancer Foundation 18:35

Paused Immunefi

Paused. Not accepting reports right now.
VaultCord 17:13

Back Bugbase

Open for reports again.
VKontakte 09:17

Cut Standoff 365

Top reward RUB 3,600,000 to RUB 1,500,000.
Bitunix Web 06:53

Raised HackenProof

Top reward $8,000 to $50,000.

Tuesday, 13 October 6 changes

Odnoklassniki 09:40

Cut Standoff 365

Top reward RUB 1,800,000 to RUB 1,000,000.
VK Video 09:40

Cut Standoff 365

Top reward RUB 2,400,000 to RUB 1,000,000.
Other Products 09:40

Cut Standoff 365

Top reward RUB 250,000 to RUB 150,000.
RuStore 09:37

Cut Standoff 365

Top reward RUB 3,600,000 to RUB 1,000,000.
VK Pay 09:37

Cut Standoff 365

Top reward RUB 2,400,000 to RUB 1,200,000.
Programmer Hat Marketplace Bug Bounty Program 04:43

Paused Bugcrowd

Paused. Not accepting reports right now.

Monday, 12 October 1 change

Malwarebytes 06:54

Paused HackerOne

Paused. Not accepting reports right now.

Sunday, 11 October 2 changes

KHealth 11:58

Cut HackerOne

Top reward $5,000 to $3,000.
Vinted Bug Bounty 11:36

Raised Bugcrowd

Top reward $4,000 to $8,000.

Thursday, 8 October 2 changes

Derive 22:35

Paused Immunefi

Paused. Not accepting reports right now.
Instacart 07:25

Raised HackerOne

Top reward $15,000 to $20,000.

Wednesday, 7 October 4 changes

Publitas 18:25

Paused HackerOne

Paused. Not accepting reports right now.
Django 18:25

Paused HackerOne

Paused. Not accepting reports right now.
Ava Labs 08:18

Paused Immunefi

Paused. Not accepting reports right now.
Ava Labs Avalanche 08:18

Paused Immunefi

Paused. Not accepting reports right now.

Tuesday, 6 October 3 changes

Algolia 14:45

Back HackerOne

Open for reports again.
MariaDB 12:34

Paused HackerOne

Paused. Not accepting reports right now.
Swiss Post 09:07

Cut YesWeHack

Top reward €10,000 to €5,000.

Monday, 5 October 3 changes

Logos 21:46

Paused HackenProof

Paused. Not accepting reports right now.
Status 21:46

Paused HackenProof

Paused. Not accepting reports right now.
Folks Finance 21:13

Cut Immunefi

Top reward $200,000 to $100,000.