Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Moneybox Bug Bounty.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"id": "moneybox-bug-bounty",
"name": "Moneybox Bug Bounty",
"public": true,
"disabled": false,
"managed": null,
"min_bounty": 50,
"max_bounty": 2000,
"targets": {
"in_scope": [
{
"target": "https://api.moneyboxapp.com",
"type": "api"
},
{
"target": "https://admin.moneyboxapp.org",
"type": "web-application"
},
{
"target": "https://admin-roundups.moneyboxapp.org",
"type": "web-application"
},
{
"target": "https://apps.apple.com/gb/app/moneybox-save-and-invest/id1049797239",
"type": "mobile-application-ios"
},
{
"target": "https://play.google.com/store/apps/details?id=com.moneyboxapp",
"type": "mobile-application-android"
},
{
"target": "https://sycamore.moneyboxapp.org",
"type": "web-application"
}
],
"out_of_scope": [
{
"target": "All domains or subdomains not listed in the above list of 'Scopes'",
"type": "other"
},
{
"target": "- Any reports relating to improper authorization / information disclosure on api.moneyboxapp.com through /investment/payments/GetGiftUser/{code} and PII leak or sensitive data exposure is out of scope as this was intended by design.",
"type": "other"
}
]
}
}All domains or subdomains not list…in the above list of 'Scopes'other- Any reports relating to improper… this was intended by design.other