YWH YesWeHack LIVE
Swapcard
€50 –€2,000
Open on YesWeHack ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- no
12 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
api.swapcard.com | api | · | · | 2026-09-20 |
chat-api.swapcard.com/graphql | api | · | · | 2026-09-20 |
developer.swapcard.com/event-admin/graphql | api | · | · | 2026-09-20 |
img.swapcard.com | api | · | · | 2026-09-20 |
login.swapcard.com | api | · | · | 2026-09-20 |
studio-api.swapcard.com | api | · | · | 2026-09-20 |
t.swapcard.com | api | · | · | 2026-09-20 |
app.swapcard.com | domain | · | · | 2026-09-20 |
studio.swapcard.com | domain | · | · | 2026-09-20 |
team.swapcard.com | domain | · | · | 2026-09-20 |
https://apps.apple.com/fr/app/swapcard/id879488719 | mobile | · | · | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=fr | mobile | · | · | 2026-09-20 |
12 out of scope — black ICE, don't touch
*dev.swapcard.comotherBy default all the endpoints that are not listed in the allowed scopes are out of scope of the program.otheraide.swapcard.com (Zoho)otherblog.swapcard.com (Hubspot)otherbooks.swapcard.com (Zoho)otherc.swapcard.comotherhelp.swapcard.com (Zoho)otherl.swapcard.comotherpage.swapcard.comothersentry.swapcard.com (Except if you notice a miss-configuration)othersurvey.swapcard.comotherwww.swapcard.com (static corporate website)other
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.