H1 HackerOne LIVE
M&T Bank Vulnerability Disclosure
no bountyVDP
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://mtb.com
- managed triage
- yes
- response efficiency
- 50%
- first response
- 0h avg
11 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
1449758462 | mobile | no | critical | 2026-09-20 |
1460176225 | mobile | no | critical | 2026-09-20 |
397761931 | mobile | no | critical | 2026-09-20 |
884228815 | mobile | no | critical | 2026-09-20 |
884242294 | mobile | no | critical | 2026-09-20 |
com.mtb.mbanking.sc.retail.prod | mobile | no | critical | 2026-09-20 |
com.mtb.mobilebanking.ncr | mobile | no | critical | 2026-09-20 |
*.leafnow.com | wildcard | no | critical | 2026-09-20 |
*.mtb.com | wildcard | no | critical | 2026-09-20 |
*.trustnota.com | wildcard | no | critical | 2026-09-20 |
*.wilmingtontrust.com | wildcard | no | critical | 2026-09-20 |
2 out of scope — black ICE, don't touch
ceros.leafnow.comdomaincom.mts.webtradingmobile
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.