BC Bugcrowd LIVE
Chime Managed Bug Bounty Engagement
up to$20,000
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- full
19 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
All Chime Assets | domain | · | · | 2026-09-20 |
http://member-qa.chime.com/enroll | domain | · | · | 2026-09-20 |
https://app-qa.chime.com/login | domain | · | · | 2026-09-20 |
https://app.chime.com | domain | · | · | 2026-09-20 |
https://app.saltlabs.com/ | domain | · | · | 2026-09-20 |
https://app.staging.saltlabs.com/ | domain | · | · | 2026-09-20 |
https://www.chime.com | domain | · | · | 2026-09-20 |
https://apps.apple.com/us/app/chime-mobile-banking/id836215269 | mobile | · | · | 2026-09-20 |
https://apps.apple.com/us/app/salt-work-and-get-rewarded/id1668462142 | mobile | · | · | 2026-09-20 |
https://drive.google.com/file/d/17IX06JcI2Nn7hbg9kDps5iK6oVi9U71O/view?usp=sharing | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.onedebit.chime | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.saltlabs.app | mobile | · | · | 2026-09-20 |
*.1debit.com | wildcard | · | · | 2026-09-20 |
*.chimebank.com | wildcard | · | · | 2026-09-20 |
*.chimecard.com | wildcard | · | · | 2026-09-20 |
*.chimepayments.com | wildcard | · | · | 2026-09-20 |
*.chmfin.com | wildcard | · | · | 2026-09-20 |
*.saltlabs.com | wildcard | · | · | 2026-09-20 |
https://*.chime.com | wildcard | · | · | 2026-09-20 |
3 out of scope — black ICE, don't touch
Non Chime Owned Assets (see list above)domainhttps://chime.financialdomainhttps://chimescholars.orgdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.