UPLINK OK // SYNC 13M AGO

H1 HackerOne LIVE

Epic Games

domainexecutablemobileotherwildcard
pays bountiesTABLE ↗ Open on HackerOne ↗
listed
before tracking
tracked since
2026-09-20
website
https://epicgames.com
managed triage
yes
response efficiency
76%
first response
0h avg
time to bounty
152h avg

84 targets in scope

assettypebountymax sevseen
aqtooling.comdomain yes critical2026-09-20
aquiris.com.brdomain yes low2026-09-20
aquiris.studiodomain yes low2026-09-20
aquiristech.comdomain yes critical2026-09-20
ballistic.comdomain yes low2026-09-20
ballistic.com.brdomain yes low2026-09-20
buckingfuggy.comdomain yes critical2026-09-20
capturingreality.comdomain yes critical2026-09-20
competitive.fortnite.comdomain yes critical2026-09-20
content-service-live-testing.bfda.live.use1a.on.epicgames.comdomain yes critical2026-09-20
content-service.bfda.live.use1a.on.epicgames.comdomain yes critical2026-09-20
cosmo.fdeb.live.use1a.on.epicgames.comdomain yes critical2026-09-20
create.fortnite.comdomain yes critical2026-09-20
fab.comdomain yes critical2026-09-20
fortnite.comdomain yes critical2026-09-20
forum.sketchfab.comdomain no critical2026-09-20
harmonixmusic.comdomain yes critical2026-09-20
hc2services.comdomain yes critical2026-09-20
hc2tooling.comdomain yes critical2026-09-20
help.sketchfab.comdomain no critical2026-09-20
hmxservices.comdomain yes critical2026-09-20
horizonchase.comdomain yes low2026-09-20
horizonchase.com.brdomain yes low2026-09-20
horizonchaseturbo.comdomain yes low2026-09-20
http://nexus.live.ucs.on.epicgames.com/domain yes critical2026-09-20
http://urc-auth-uefn.live.ucs.on.epicgames.com/domain yes critical2026-09-20
http://urc-uefn.live.ucs.on.epicgames.comdomain yes critical2026-09-20
https://communities.epicgames.comdomain yes critical2026-09-20
https://fn-commerce-live.eeef.live.use1a.on.epicgames.com/api/fn-commerce/domain yes critical2026-09-20
https://fngw-svc-ds-livefn.ol.epicgames.net/api/magpiedomain yes critical2026-09-20
https://fngw-svc-gc-livefn.ol.epicgames.net/api/magpiedomain yes critical2026-09-20
innersloth.kidswebservices.comdomain yes critical2026-09-20
kidswebservices.comdomain yes critical2026-09-20
metahuman.unrealengine.comdomain yes critical2026-09-20
niantic.kidswebservices.comdomain yes critical2026-09-20
playwonderbox.comdomain yes low2026-09-20
playwonderbox.com.brdomain yes low2026-09-20
staging.kidswebservices.comdomain yes critical2026-09-20
twinmotion.unrealengine.comdomain yes critical2026-09-20
wonderboxapi.comdomain yes critical2026-09-20
wonderboxdev.comdomain yes critical2026-09-20
EOS C# SDKexecutable yes critical2026-09-20
EpicGamesLauncher.exeexecutable yes critical2026-09-20
FortniteClient-Win64-Shipping.exeexecutable yes critical2026-09-20
FortniteLauncher-Win64-Shipping.exeexecutable yes critical2026-09-20
FortniteLauncher-Win64-Shipping_BE.exeexecutable yes critical2026-09-20
FortniteLauncher-Win64-Shipping_EAC.exeexecutable yes critical2026-09-20
FortniteLauncher.exeexecutable yes critical2026-09-20
UEFNexecutable yes critical2026-09-20
UnrealEditorFortnite-Win64-Shipping.exeexecutable yes critical2026-09-20
FortniteClient-Android-Shipping-arm64-es2.apkmobile yes critical2026-09-20
id1520720139mobile yes critical2026-09-20
id1534920947mobile yes critical2026-09-20
Any other Epic games owned asset not listed in the out of scope sectionother yes critical2026-09-20
EpicOnlineServicesother yes critical2026-09-20
v1. kidswebservices.comother yes critical2026-09-20
v1staging.kidswebservices.comother yes critical2026-09-20
*.3lateral.comwildcard yes critical2026-09-20
*.amplitude-game.comwildcard yes critical2026-09-20
*.artstation.comwildcard yes critical2026-09-20
*.audicagame.comwildcard yes critical2026-09-20
*.cubicmotion.comwildcard yes critical2026-09-20
*.dancecentral.comwildcard yes critical2026-09-20
*.dropmix.comwildcard yes critical2026-09-20
*.easy.acwildcard yes critical2026-09-20
*.epicgames.comwildcard yes critical2026-09-20
*.epicgames.devwildcard yes critical2026-09-20
*.fallguys.comwildcard yes low2026-09-20
*.fortnite.comwildcard yes critical2026-09-20
*.harmonixmusic.comwildcard yes critical2026-09-20
*.hmxservices.comwildcard yes critical2026-09-20
*.hmxwebservices.comwildcard yes critical2026-09-20
*.mediatonic.co.ukwildcard yes critical2026-09-20
*.oncatapult.comwildcard yes critical2026-09-20
*.psynet.ggwildcard yes critical2026-09-20
*.psyonix.comwildcard yes critical2026-09-20
*.quixel.comwildcard yes critical2026-09-20
*.rocketleague.comwildcard yes critical2026-09-20
*.singspacegame.comwildcard yes critical2026-09-20
*.sketchfab.comwildcard yes critical2026-09-20
*.twinmotion.comwildcard yes critical2026-09-20
*.unrealengine.comwildcard yes critical2026-09-20
*.unrealtournament.comwildcard yes critical2026-09-20
dev.epicgames.com/*wildcard yes critical2026-09-20
99 out of scope — black ICE, don't touch

Change log

get alerts ↗

No changes since we started tracking on 2026-09-20.