eufy bug bounty programs
eufy.com Updated
Eufy runs one public program: a HackerOne bug bounty paying up to $1,000.
- Top reward
- $1,000
- HackerOne
- Programs
- 1
- 1 pays cash
- Targets in scope
- 19
- 4 types
- Last change
- None yet
- Tracked since Nov 2026
Where to report
The one public program eufy runs.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
eufy Security
HackerOne · Bug bounty |
$1,000 | $500 | $300 | $100 | $1,000 | Full | – | 3 hours average | Open |
-
- Critical
- $1,000
- High
- $500
- Medium
- $300
- Low
- $100
- Safe harbor
- Full
- First response
- 3 hours average
Amounts are the top reward per severity in the currency each program pays. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
19 targets.
-
com.anker.charging
Android High
-
com.oceanwing.battery.cam
Android High
-
com.oceanwing.FDMPrint
Android High
-
id=com.oceanwing.soundcore
Android Critical
-
id=com.zhixin.controller
Android Critical
-
Anker
iOS High
-
anker-nebula/id1319092174
iOS Critical
-
com.anker.AnkerMake
iOS High
-
com.security.BatteryCam
iOS High
-
soundcore/id1331876603
iOS Critical
-
Anker soundcore Work D3200
Hardware and IoT Critical
-
eufyMake E1
Hardware and IoT Critical
-
https://us.eufy.com/products/e8213181
Hardware and IoT Critical
-
https://us.eufy.com/products/t8410121
Hardware and IoT High
-
https://us.eufy.com/products/t88511d1
Hardware and IoT High
-
https://us.eufy.com/products/t88711w1
Hardware and IoT High
-
Liberty 5 Pro Max D1204
Hardware and IoT Critical
-
Solarbank 2 E1600 Pro
Hardware and IoT Critical
-
eufyMake Studio(2D UV)
Products and areas Critical
No target matches. Try part of a host name, such as the company name.
Recent changes
Reward and scope changes across every eufy program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
Recent CVEs
Published vulnerabilities in eufy products, from the NVD.
-
CVE-2023-37822 High
The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary network. The WPA2-PSK generation of this dedicated network is flawed and solely based on the serial number. Due to the flawed generation process, the WPA2-PSK can be brute forced offline within seconds. This vulnerability allows an attacker
About this page
This page gathers every public program listed under eufy.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.