YWH YesWeHack LIVE
Moneybox Bug Bounty
€50 –€2,000
Open on YesWeHack ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- no
6 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://api.moneyboxapp.com | api | · | · | 2026-09-20 |
https://admin-roundups.moneyboxapp.org | domain | · | · | 2026-09-20 |
https://admin.moneyboxapp.org | domain | · | · | 2026-09-20 |
https://sycamore.moneyboxapp.org | domain | · | · | 2026-09-20 |
https://apps.apple.com/gb/app/moneybox-save-and-invest/id1049797239 | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.moneyboxapp | mobile | · | · | 2026-09-20 |
2 out of scope — black ICE, don't touch
- Any reports relating to improper authorization / information disclosure on api.moneyboxapp.com through /investment/payments/GetGiftUser/{code} and PII leak or sensitive data exposure is out of scope as this was intended by design.otherAll domains or subdomains not listed in the above list of 'Scopes'other
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.