H1 HackerOne LIVE
Lyst
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.lyst.com
- managed triage
- yes
- response efficiency
- 60%
- first response
- 21h avg
- time to bounty
- 622h avg
7 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
cdna.lystit.com | domain | yes | critical | 2026-09-20 |
mobileapi.lystit.com | domain | yes | critical | 2026-09-20 |
597940518 | mobile | yes | critical | 2026-09-20 |
com.lyst.lystapp | mobile | yes | critical | 2026-09-20 |
*.lyst.co | wildcard | yes | critical | 2026-09-20 |
*.lyst.com | wildcard | yes | critical | 2026-09-20 |
*.lystit.com | wildcard | yes | critical | 2026-09-20 |
1 out of scope — black ICE, don't touch
help.lyst.comdomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.