H1 HackerOne LIVE
Tools for Humanity
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://toolsforhumanity.com
- managed triage
- yes
- response efficiency
- 92%
- first response
- 5h avg
- time to bounty
- 383h avg
22 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
developer.worldcoin.org | domain | yes | critical | 2026-09-20 |
toolsforhumanity.com | domain | yes | critical | 2026-09-20 |
world.org | domain | yes | critical | 2026-09-20 |
worldcoin.org | domain | yes | critical | 2026-09-20 |
https://apps.apple.com/no/app/world-app-worldcoin-wallet/id1560859847 | mobile | yes | critical | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.worldcoin | mobile | yes | critical | 2026-09-20 |
Primary Assets | other | yes | critical | 2026-09-20 |
Secondary Assets | other | yes | critical | 2026-09-20 |
https://docs.world.org/world-chain/reference/address-book | smart contract | yes | critical | 2026-09-20 |
https://github.com/worldcoin | source code | yes | critical | 2026-09-20 |
https://github.com/worldcoin/orb-core | source code | yes | critical | 2026-09-20 |
https://github.com/worldcoin/orb-firmware | source code | yes | critical | 2026-09-20 |
https://github.com/worldcoin/orb-messages | source code | yes | critical | 2026-09-20 |
https://github.com/worldcoin/orb-relay-messages | source code | yes | critical | 2026-09-20 |
https://github.com/worldcoin/orb-rustzone | source code | yes | critical | 2026-09-20 |
https://github.com/worldcoin/orb-secure-element | source code | yes | critical | 2026-09-20 |
https://github.com/worldcoin/orb-software | source code | yes | critical | 2026-09-20 |
*.consumer.worldcoin.org | wildcard | yes | critical | 2026-09-20 |
*.toolsforhumanity.com | wildcard | yes | critical | 2026-09-20 |
*.worldcoin-distributors.com | wildcard | yes | critical | 2026-09-20 |
*.worldcoin.dev | wildcard | yes | critical | 2026-09-20 |
*.worldcoin.org | wildcard | yes | critical | 2026-09-20 |
3 out of scope — black ICE, don't touch
support.world.orgdomainsupport.worldcoin.comdomainhttps://github.com/worldcoin/orb-hardwaresource code
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.