paypal

HackerOneView on HackerOne
RawAI Enhanced
41
In Scope
7
Out of Scope
In-Scope Assets (41)
AssetCategoryBountyQuick Links
*.braintree-api.comURLYes
*.braintree.toolsURLYes
*.braintreegateway.comURLYes
*.braintreepayments.comURLYes
*.hyperwallet.comURLYes
*.paydiant.comURLYes
*.paylution.comURLYes
*.paypal.comURLYes
*.paypalcorp.comURLYes
*.venmo.comURLYes
*.xoom.comURLYes
351727428IOSYes-
Braintree SDKOTHERYes-
PayPal SDKOTHERYes-
api.loanbuilder.comURLYes
api.swiftfinancial.comURLYes
com.paypal.android.p2pmobileANDROIDYes
com.paypal.merchantIOSYes-
com.paypal.merchant.clientANDROIDYes
com.venmoANDROIDYes
com.xoom.android.appANDROIDYes
com.xoom.appIOSYes-
com.yourcompany.PPClientIOSNo-
decision.swiftfinancial.comURLYes
loanbuilder.comURLYes
my.loanbuilder.comURLYes
my.swiftfinancial.comURLYes
partner.swiftfinancial.comURLYes
paypal.meURLYes
paypalobjects.comURLYes
pigeon.swiftfinancial.comURLYes
prequal.swiftfinancial.comURLYes
py.plURLYes
sandbox.braintreegateway.comURLYes
scrutiny.swiftfinancial.comURLYes
swiftcapital.comURLYes
swiftfinancial.comURLYes
www.loanbuilder.comURLYes
www.paypal-*.comURLYes
www.swiftcapital.comURLYes
www.swiftfinancial.comURLYes
Out-of-Scope Assets (7)
AssetCategoryBounty
*.atlassian.netOTHERNo
*.paypal.cnURLNo
braintree.comURLNo
com.paypal.hereIOSNo
com.paypal.hereANDROIDNo
com.paypal.herehdIOSNo
www.gopay.comURLNo
Scope Changes (137)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedwww.paypal-*.comWILDCARDIn Scope19:09
Addedwww.swiftcapital.comURLIn Scope19:09
Addedloanbuilder.comURLIn Scope19:09
Addedsandbox.braintreegateway.comURLIn Scope19:09
Addedbraintree.comURLOut of Scope19:09
Added351727428IOSIn Scope19:09
Addedcom.xoom.appIOSIn Scope19:09
Addedcom.venmoANDROIDIn Scope19:09
Added*.venmo.comWILDCARDIn Scope19:09
Added*.braintree-api.comWILDCARDIn Scope19:09
Addedswiftcapital.comURLIn Scope19:09
Added*.atlassian.netWILDCARDOut of Scope19:09
Addedcom.yourcompany.ppclientIOSIn Scope19:09
Addedcom.paypal.merchantIOSIn Scope19:09
Addedcom.paypal.merchant.clientANDROIDIn Scope19:09
Addedpartner.swiftfinancial.comURLIn Scope19:09
Addedpigeon.swiftfinancial.comURLIn Scope19:09
Addedwww.swiftfinancial.comURLIn Scope19:09
Addedmy.swiftfinancial.comURLIn Scope19:09
Addedpaypal.meURLIn Scope19:09
Addedmy.loanbuilder.comURLIn Scope19:09
Addedcom.paypal.hereANDROIDOut of Scope19:09
Added*.paydiant.comWILDCARDIn Scope19:09
Addedcom.xoom.android.appANDROIDIn Scope19:09
Addedcom.paypal.android.p2pmobileANDROIDIn Scope19:09
Added*.xoom.comWILDCARDIn Scope19:09
Added*.paypal.comWILDCARDIn Scope19:09
Addedpaypalobjects.comURLIn Scope19:09
Addedapi.swiftfinancial.comURLIn Scope19:09
Addedapi.loanbuilder.comURLIn Scope19:09
Added*.braintree.toolsWILDCARDIn Scope19:09
Addedprequal.swiftfinancial.comURLIn Scope19:09
Addeddecision.swiftfinancial.comURLIn Scope19:09
Addedswiftfinancial.comURLIn Scope19:09
Added*.hyperwallet.comWILDCARDIn Scope19:09
Addedbraintree sdkOTHERIn Scope19:09
Addedcom.paypal.herehdIOSOut of Scope19:09
Addedcom.paypal.hereIOSOut of Scope19:09
Addedpy.plURLIn Scope19:09
Addedscrutiny.swiftfinancial.comURLIn Scope19:09
Addedwww.loanbuilder.comURLIn Scope19:09
Added*.braintreegateway.comWILDCARDIn Scope19:09
Added*.braintreepayments.comWILDCARDIn Scope19:09
Added*.paypalcorp.comWILDCARDIn Scope19:09
Added*.paylution.comWILDCARDIn Scope19:09
Addedpaypal sdkOTHERIn Scope19:09
Addedwww.gopay.comURLOut of Scope19:09
Added*.paypal.cnWILDCARDOut of Scope19:09
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addeddecision.swiftfinancial.comURLIn Scope00:40
Addedcom.yourcompany.ppclientIOSIn Scope00:40
Addedcom.xoom.android.appANDROIDIn Scope00:40
Added*.xoom.comWILDCARDIn Scope00:40
Addedpaypal.meURLIn Scope00:40
Addedscrutiny.swiftfinancial.comURLIn Scope00:40
Added*.paypalcorp.comWILDCARDIn Scope00:40
Added*.braintree.toolsWILDCARDIn Scope00:40
Addedprequal.swiftfinancial.comURLIn Scope00:40
Addedmy.swiftfinancial.comURLIn Scope00:40
Addedmy.loanbuilder.comURLIn Scope00:40
Added*.paylution.comWILDCARDIn Scope00:40
Addedcom.paypal.herehdIOSOut of Scope00:40
Addedcom.paypal.hereANDROIDOut of Scope00:40
Added*.atlassian.netWILDCARDOut of Scope00:40
Addedcom.paypal.android.p2pmobileANDROIDIn Scope00:40
Addedcom.paypal.hereIOSOut of Scope00:40
Addedwww.gopay.comURLOut of Scope00:40
Added*.venmo.comWILDCARDIn Scope00:40
Addedpartner.swiftfinancial.comURLIn Scope00:40
Addedloanbuilder.comURLIn Scope00:40
Addedcom.paypal.merchant.clientANDROIDIn Scope00:40
Addedcom.venmoANDROIDIn Scope00:40
Addedwww.paypal-*.comWILDCARDIn Scope00:40
Added*.paydiant.comWILDCARDIn Scope00:40
Addedpy.plURLIn Scope00:40
Addedapi.loanbuilder.comURLIn Scope00:40
Addedpaypal sdkOTHERIn Scope00:40
Added*.paypal.cnWILDCARDOut of Scope00:40
Added351727428IOSIn Scope00:40
Addedcom.paypal.merchantIOSIn Scope00:40
Added*.paypal.comWILDCARDIn Scope00:40
Added*.braintreegateway.comWILDCARDIn Scope00:40
Added*.braintreepayments.comWILDCARDIn Scope00:40
Addedcom.xoom.appIOSIn Scope00:40
Addedpigeon.swiftfinancial.comURLIn Scope00:40
Addedwww.swiftcapital.comURLIn Scope00:40
Addedwww.swiftfinancial.comURLIn Scope00:40
Addedswiftfinancial.comURLIn Scope00:40
Addedswiftcapital.comURLIn Scope00:40
Addedsandbox.braintreegateway.comURLIn Scope00:40
Addedbraintree sdkOTHERIn Scope00:40
Addedpaypalobjects.comURLIn Scope00:40
Added*.braintree-api.comWILDCARDIn Scope00:40
Addedwww.loanbuilder.comURLIn Scope00:40
Addedapi.swiftfinancial.comURLIn Scope00:40
Added*.hyperwallet.comWILDCARDIn Scope00:40
Addedbraintree.comURLOut of Scope00:40
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedpaypal sdkOTHERIn Scope21:38
Removed351727428IOSIn Scope21:38
Removedcom.xoom.appIOSIn Scope21:38
Removedcom.paypal.merchantIOSIn Scope21:38
Removedcom.xoom.android.appANDROIDIn Scope21:38
Removedcom.paypal.merchant.clientANDROIDIn Scope21:38
Removedcom.paypal.android.p2pmobileANDROIDIn Scope21:38
Removedcom.venmoANDROIDIn Scope21:38
Removedwww.paypal-*.comURLIn Scope21:38
Removed*.xoom.comURLIn Scope21:38
Removed*.paypal.comURLIn Scope21:38
Removed*.braintreegateway.comURLIn Scope21:38
Removed*.paydiant.comURLIn Scope21:38
Removed*.venmo.comURLIn Scope21:38
Removedpaypalobjects.comURLIn Scope21:38
Removedpaypal.meURLIn Scope21:38
Removedpy.plURLIn Scope21:38
Removed*.braintreepayments.comURLIn Scope21:38
Removed*.braintree-api.comURLIn Scope21:38
Removed*.braintree.toolsURLIn Scope21:38
Removedprequal.swiftfinancial.comURLIn Scope21:38
Removedpartner.swiftfinancial.comURLIn Scope21:38
Removeddecision.swiftfinancial.comURLIn Scope21:38
Removedpigeon.swiftfinancial.comURLIn Scope21:38
Removedscrutiny.swiftfinancial.comURLIn Scope21:38
Removedwww.swiftcapital.comURLIn Scope21:38
Removedwww.loanbuilder.comURLIn Scope21:38
Removedwww.swiftfinancial.comURLIn Scope21:38
Removedapi.swiftfinancial.comURLIn Scope21:38
Removedmy.swiftfinancial.comURLIn Scope21:38
Removedapi.loanbuilder.comURLIn Scope21:38
Removedmy.loanbuilder.comURLIn Scope21:38
Removedloanbuilder.comURLIn Scope21:38
Removedswiftfinancial.comURLIn Scope21:38
Removedswiftcapital.comURLIn Scope21:38
Removed*.paypalcorp.comURLIn Scope21:38
Removed*.hyperwallet.comURLIn Scope21:38
Removed*.paylution.comURLIn Scope21:38
Removedsandbox.braintreegateway.comURLIn Scope21:38
Removedbraintree sdkOTHERIn Scope21:38
Addedcom.yourcompany.ppclientIOSIn Scope19:11