YWH YesWeHack LIVE
Paddle.com Public Bug Bounty Program
€50 –€5,000
Open on YesWeHack ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- no
12 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://api.paddle.com | api | · | · | 2026-09-20 |
https://sandbox-api.paddle.com | api | · | · | 2026-09-20 |
https://customer-portal.paddle.com | domain | · | · | 2026-09-20 |
https://developer.paddle.com | domain | · | · | 2026-09-20 |
https://login.paddle.com | domain | · | · | 2026-09-20 |
https://paddle.net | domain | · | · | 2026-09-20 |
https://sandbox-buy.paddle.com | domain | · | · | 2026-09-20 |
https://sandbox-checkout-service.paddle.com | domain | · | · | 2026-09-20 |
https://sandbox-login.paddle.com | domain | · | · | 2026-09-20 |
https://sandbox-vendors.paddle.com | domain | · | · | 2026-09-20 |
https://vendors.paddle.com | domain | · | · | 2026-09-20 |
https://www.paddle.com | domain | · | · | 2026-09-20 |
3 out of scope — black ICE, don't touch
All domains, subdomains or assets not listed in the above list of 'Scopes' must be considered as out of the scope of this programotherhttps://buy.paddle.comotherhttps://checkout-service.paddle.comother
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.