Robinhood Markets, Inc. bug bounty programs
robinhood.com Updated
Robinhood Markets, Inc. runs three public programs: a Cantina bug bounty paying up to $1,000,000, a HackerOne bug bounty paying up to $25,000 and a HackerOne disclosure program with no cash rewards.
- Top reward
- $1,000,000
- Cantina
- Programs
- 3
- 2 pay cash
- Targets in scope
- 42
- 7 types, deduplicated
- Last change
- None yet
- Tracked since Nov 2026
Where to report
3 programs, side by side. Report where the affected target is in scope; when two programs cover it, pick the one that pays more.
Start here
Robinhood
Cantina · Pays the most of the 3 programs: up to $1,000,000.
| Program | Critical | High | Medium | Low | Top reward | Safe harbor | KYC | First response | Status |
|---|---|---|---|---|---|---|---|---|---|
|
Robinhood
Cantina · Bug bounty |
$1M (highest) | $100k (highest) | $25k (highest) | $5,000 (highest) | $1,000,000 | Partial | Required | – | Open |
|
Robinhood Markets Bounty
HackerOne · Bug bounty |
$25k | $10k | $5,000 | $500 | $25,000 | Full | – | 10 hours average | Open |
|
Robinhood Markets
HackerOne · Disclosure only |
– | – | – | – | No cash | Full | – | 43 hours average | Open |
-
- Critical
- $1M (highest)
- High
- $100k (highest)
- Medium
- $25k (highest)
- Low
- $5,000 (highest)
- Safe harbor
- Partial
- KYC
- Required
-
- Critical
- $25k
- High
- $10k
- Medium
- $5,000
- Low
- $500
- Safe harbor
- Full
- First response
- 10 hours average
-
- Safe harbor
- Full
- First response
- 43 hours average
Amounts are the top reward per severity in the currency each program pays. Green marks the highest per severity. First response is the platform's measured average when it publishes one, else what the policy promises.
What is in scope
42 targets across all 3 programs, each listed once with the programs that cover it. 43 excluded.
-
com.robinhood.global Android
Android Critical
Covered by Robinhood Markets, Robinhood Markets Bounty
-
https://docs.robinhood.com/chain/contracts/#stock-tokens--tokenized-etfs
Smart contracts
Covered by Cantina
-
https://robinhoodchain.blockscout.com/address/0x4783C67b63dE2B358Ac5951a7D41F47A38F3C046
Smart contracts
Covered by Cantina
-
https://robinhoodchain.blockscout.com/address/0xd4A91E5023406903afF83225186e1d1eD18CA587
Smart contracts
Covered by Cantina
-
https://robinhoodchain.blockscout.com/address/0xe10b6f6B275de231345c20D14Ab812db62151b00
Smart contracts
Covered by Cantina
No target matches. Try part of a host name, such as the company name.
Out of scope 43
Don't test these. A program can exclude a host another program covers; the program you report to decides.
-
7671800.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
7671800.team.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
_16928ca3f53f40a48a751be40fa24e4c.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
_domainconnect.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
affiliates.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
api-sandbox.tradepmr.com
Robinhood Markets Robinhood Markets Bounty
-
api-validation.tradepmr.com
Robinhood Markets Robinhood Markets Bounty
-
api.tradepmr.com
Robinhood Markets Bounty Robinhood Markets
-
auth-sandbox.tradepmr.com
Robinhood Markets Robinhood Markets Bounty
-
auth-validation.tradepmr.com
Robinhood Markets Robinhood Markets Bounty
-
auth.tradepmr.com
Robinhood Markets Bounty Robinhood Markets
-
autodiscover.bitstamp.net
Robinhood Markets Bounty Robinhood Markets
-
bounces.bitstamp.net
Robinhood Markets Bounty Robinhood Markets
-
careers.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
content.research.robinhood.com
Robinhood Markets Robinhood Markets Bounty
-
earlytalent.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
em1198.bitstamp.net
Robinhood Markets Bounty Robinhood Markets
-
em4296.team.bitstamp.net
Robinhood Markets Bounty Robinhood Markets
-
em9457.team.bitstamp.net
Robinhood Markets Bounty Robinhood Markets
-
enterpriseenrollment.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
enterpriseregistration.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
esg.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
events.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
fleet.infra.robinhood.net
Robinhood Markets Robinhood Markets Bounty
-
fusion-demo.tradepmr.com
Robinhood Markets Bounty Robinhood Markets
-
fusion-demo.uat.tradepmr.com
Robinhood Markets Robinhood Markets Bounty
-
fusion-demo.uat2.tradepmr.com
Robinhood Markets Bounty Robinhood Markets
-
fusion.uat.tradepmr.com
Robinhood Markets Bounty Robinhood Markets
-
fusion.uat2.tradepmr.com
Robinhood Markets Bounty Robinhood Markets
-
fusion.uat3.tradepmr.com
Robinhood Markets Robinhood Markets Bounty
-
go.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
https://www.saytechnologies.com/contact/sales
Robinhood Markets Robinhood Markets Bounty
-
press.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
roadshow.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
sandbox.bitstamp.net
Robinhood Markets Bounty
-
share.robinhood.com
Robinhood Markets Robinhood Markets Bounty
-
shop.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
startinvesting.robinhood.com
Robinhood Markets Robinhood Markets Bounty
-
status.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
underthehoodpod.robinhood.com
Robinhood Markets Robinhood Markets Bounty
-
url6884.team.bitstamp.net
Robinhood Markets Robinhood Markets Bounty
-
vgs-api.robinhood.com
Robinhood Markets Bounty Robinhood Markets
-
weareallinvestors.robinhood.com
Robinhood Markets Robinhood Markets Bounty
Recent changes
Reward and scope changes across every Robinhood Markets, Inc. program, newest first.
No changes recorded yet. New targets and reward moves show up here and in the RSS feed.
About this page
This page gathers every public program listed under robinhood.com: platform programs, self-hosted policies and security.txt contacts. Each program's own policy decides what is in scope and what it pays; check it before you test.
Something wrong or missing? Report a correction.