H1 HackerOne LIVE
Privy (Bounty)
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://privy.io
- managed triage
- yes
- response efficiency
- 95%
- first response
- 21h avg
- time to bounty
- 239h avg
12 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.privy.io | domain | yes | critical | 2026-09-20 |
auth.privy.io | domain | yes | critical | 2026-09-20 |
dashboard.privy.io | domain | yes | critical | 2026-09-20 |
home.privy.io | domain | yes | critical | 2026-09-20 |
recovery.privy.io | domain | yes | critical | 2026-09-20 |
@privy-io controlled namespace dependencies | other | yes | critical | 2026-09-20 |
https://www.npmjs.com/package/@privy-io/cross-app-connect | other | yes | critical | 2026-09-20 |
https://www.npmjs.com/package/@privy-io/cross-app-provider | other | yes | critical | 2026-09-20 |
https://www.npmjs.com/package/@privy-io/expo | other | yes | critical | 2026-09-20 |
https://www.npmjs.com/package/@privy-io/js-sdk-core | other | yes | critical | 2026-09-20 |
https://www.npmjs.com/package/@privy-io/wagmi | other | yes | critical | 2026-09-20 |
https://www.npmjs.com/package/@privy-io/react-auth | source code | yes | critical | 2026-09-20 |
4 out of scope — black ICE, don't touch
blog.privy.iodomaindemo.privy.iodomaindocs.privy.iodomainprivy.iodomain
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.