Bug bounty program changes

What moved on public bug bounty programs, newest first. Cuts, removals and closures are confirmed on a second check before they show.

Updated 12 Nov 2026, 20:34 UTC

Last 7 days

Scope added: 258
Rewards raised: 4
Cuts and removals: 8
New programs: 0

Platform When Direction

443 changes

Monday, 5 October 8 changes

Skoda Auto Bug Bounty Program 18:29

Paused Intigriti

Paused. Not accepting reports right now.
Paxos Labs 18:17

Closed Immunefi

No longer listed as a public program.
MetaMask 16:35

Paused HackerOne

Paused. Not accepting reports right now.
Bitso Managed Bug Bounty Engagement 16:05

Raised Bugcrowd

Top reward $7,500 to $15,000.
Trusted Firmware 15:29

Paused Intigriti

Paused. Not accepting reports right now.
NUVA 13:39

Paused Immunefi

Paused. Not accepting reports right now.
ExpressionEngine 10:04

Paused HackerOne

Paused. Not accepting reports right now.
Konsol 07:33

Back Standoff 365

Listed again and open for reports.

Sunday, 4 October 3 changes

Zynk Protocol 16:53

Back HackenProof

Open for reports again.
EcoNaviSta Bug Bounty Program 16:11

Paused IssueHunt

Paused. Not accepting reports right now.
IoT Platform SORACOM 16:11

Paused IssueHunt

Paused. Not accepting reports right now.

Friday, 2 October 1 change

Visma 13:27

Back Intigriti

Open for reports again.

Thursday, 1 October 6 changes

Zabbix 06:21

Paused HackerOne

Paused. Not accepting reports right now.
Afterpay Bug Bounty Program 06:05

Paused Bugcrowd

Paused. Not accepting reports right now.
Square 06:05

Paused Bugcrowd

Paused. Not accepting reports right now.
TIDAL 06:05

Paused Bugcrowd

Paused. Not accepting reports right now.
Cash App 06:05

Paused Bugcrowd

Paused. Not accepting reports right now.
Block Open Source 06:05

Paused Bugcrowd

Paused. Not accepting reports right now.

Wednesday, 30 September 7 changes

Algolia 17:36

Paused HackerOne

Paused. Not accepting reports right now.
MongoDB 14:46

Raised HackerOne

Top reward $7,500 to $8,500.
Challenge 0926 12:54

Paused Intigriti

Paused. Not accepting reports right now.
Kinepolis Group 12:54

Back Intigriti

Open for reports again.
Veriff Bug Bounty 12:54

Back Intigriti

Open for reports again.
Vercel Open Source 12:29

Paused HackerOne

Paused. Not accepting reports right now.
GoCardless Bug Bounty Program 12:29

Paused HackerOne

Paused. Not accepting reports right now.

Tuesday, 29 September 1 change

XOXNO 06:53

Cut Immunefi

Top reward $50,000 to $20,000.

Monday, 28 September 2 changes

Zerion 13:02

Paused Immunefi

Paused. Not accepting reports right now.
DAWN USD.infra Vault 08:58

Back Immunefi

Open for reports again.

Friday, 25 September 2 changes

Fivetran 16:14

Cut Bugcrowd

Top reward $15,000 to $7,500.
GoCardless Bug Bounty Program 07:41

Closed HackerOne

No longer listed as a public program.

Thursday, 24 September 2 changes

Sui Protocol 20:11

Cut HackenProof

Top reward $1,000,000 to $250,000.
IPOR 15:56

Cut Immunefi

Top reward $20,000 to $1,000.

Wednesday, 23 September 1 change

Magic Labs Managed Bug Bounty Engagement 20:14

Paused Bugcrowd

Paused. Not accepting reports right now.

Tuesday, 22 September 2 changes

Treehouse Smart Contracts 08:07

Cut HackenProof

Top reward $250,000 to $50,000.
ShapeShift 07:58

Back HackenProof

Open for reports again.

Monday, 21 September 7 changes

Block Open Source 19:09

Back Bugcrowd

Open for reports again.
Afterpay Bug Bounty Program 19:09

Back Bugcrowd

Open for reports again.
lululemon 19:09

Back Bugcrowd

Open for reports again.
Square 19:09

Back Bugcrowd

Open for reports again.
TIDAL 19:09

Back Bugcrowd

Open for reports again.
Cash App 19:09

Back Bugcrowd

Open for reports again.
Vercel Open Source 17:24

Closed HackerOne

No longer listed as a public program.

Sunday, 20 September 1 change

Files.com 14:24

Raised HackerOne

Top reward $15,000 to $50,000.