H1 HackerOne LIVE
OPPO
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://security.oppo.com/en/
- managed triage
- yes
- response efficiency
- 89%
- first response
- 2h avg
- time to bounty
- 153h avg
133 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
com.heytap.store | mobile | yes | critical | 2026-09-20 |
com.heytap.tas | mobile | yes | critical | 2026-09-20 |
com.heytap.themestore | mobile | yes | critical | 2026-09-20 |
com.heytap.wallet | mobile | yes | critical | 2026-09-20 |
com.heytap.wearable.breeno | mobile | yes | critical | 2026-09-20 |
com.heytap.wearable.browser | mobile | yes | critical | 2026-09-20 |
com.heytap.wearable.elves | mobile | yes | critical | 2026-09-20 |
com.heytap.wearable.healthassessment | mobile | yes | critical | 2026-09-20 |
com.heytap.wearable.market | mobile | yes | critical | 2026-09-20 |
com.heytap.wearable.research | mobile | yes | critical | 2026-09-20 |
com.heytap.wearable.themestore | mobile | yes | critical | 2026-09-20 |
com.heytap.xgame | mobile | yes | critical | 2026-09-20 |
com.katanlabs.bubblepop | mobile | yes | critical | 2026-09-20 |
com.katanlabs.matchballgame | mobile | yes | critical | 2026-09-20 |
com.nearme.gamecenter | mobile | yes | critical | 2026-09-20 |
com.netease.my.nearme.gamecenter | mobile | yes | critical | 2026-09-20 |
com.oplus.accesscard | mobile | yes | critical | 2026-09-20 |
com.oplus.account | mobile | yes | critical | 2026-09-20 |
com.oplus.aimemory | mobile | yes | critical | 2026-09-20 |
com.oplus.games | mobile | yes | critical | 2026-09-20 |
com.oplus.melody | mobile | yes | critical | 2026-09-20 |
com.oplus.play | mobile | yes | critical | 2026-09-20 |
com.oplus.studycenter | mobile | yes | critical | 2026-09-20 |
com.oplus.themestore | mobile | yes | critical | 2026-09-20 |
com.oppo.market | mobile | yes | critical | 2026-09-20 |
com.oppo.quicksearchbox | mobile | yes | critical | 2026-09-20 |
com.oppo.speechassist | mobile | yes | critical | 2026-09-20 |
com.oppo.store | mobile | yes | critical | 2026-09-20 |
com.qpon.merchant | mobile | yes | critical | 2026-09-20 |
com.qpon.platform | mobile | yes | critical | 2026-09-20 |
com.shopai.apps | mobile | yes | critical | 2026-09-20 |
ColorOS | other | yes | critical | 2026-09-20 |
Low Level Properties and Test environment | other | yes | critical | 2026-09-20 |
1 out of scope — black ICE, don't touch
com.fullmetalgamedev.fruitshootingmobile
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.