H1 HackerOne LIVE
MoonPay
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://moonpay.com
- managed triage
- no
- response efficiency
- 99%
- first response
- 17h avg
- time to bounty
- 75h avg
20 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.moonpay.com | domain | yes | critical | 2026-09-20 |
api.moonx-dev.com | domain | yes | critical | 2026-09-20 |
api.paybox.sh | domain | yes | critical | 2026-09-20 |
app.moonpay.com | domain | yes | critical | 2026-09-20 |
app.paybox.sh | domain | yes | critical | 2026-09-20 |
auth.moonpay.com | domain | yes | critical | 2026-09-20 |
buy.moonpay.com | domain | yes | critical | 2026-09-20 |
hypermint.com | domain | yes | critical | 2026-09-20 |
iframe.moonx-dev.com | domain | yes | critical | 2026-09-20 |
moonpay.com | domain | yes | critical | 2026-09-20 |
sell.moonpay.com | domain | yes | critical | 2026-09-20 |
web3.moonpay.com | domain | yes | critical | 2026-09-20 |
https://apps.apple.com/app/id1635031432 | mobile | yes | critical | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.moonpay | mobile | yes | critical | 2026-09-20 |
https://github.com/moonpay | source code | yes | critical | 2026-09-20 |
*.hypermint.com | wildcard | yes | critical | 2026-09-20 |
*.iron.xyz | wildcard | yes | critical | 2026-09-20 |
*.moonpay.com | wildcard | yes | critical | 2026-09-20 |
*.moonpaycloud.com | wildcard | yes | critical | 2026-09-20 |
*.swaps.xyz | wildcard | yes | critical | 2026-09-20 |
19 out of scope — black ICE, don't touch
clicks.moonpay.comdomaindev.moonpay.comdomaindocs.hypermint.comdomaindocs.moonpay.comdomainethpass.xyzdomainhelp.moonpay.comdomainpage.moonpay.comdomainpayload-marketing.moonpay.comdomainplexlabs.iodomainqr.moonpay.comdomainrequest-headers-no-proxy.moonpay.comdomainrequest-headers.moonpay.comdomainstorefront.hypermint.comdomainsupport.moonpay.comdomainhttps://github.com/moonpay/devops-challengesource codehttps://github.com/moonpay/moonpay-demo-integrationssource codehttps://github.com/moonpay/moonpay-signsource code*.hel.iowildcard*.plexlabs.iowildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.