snapchat

HackerOneView on HackerOne
RawAI Enhanced
40
In Scope
6
Out of Scope
In-Scope Assets (40)
AssetCategoryBountyQuick Links
*.sc-core.netURLYes
*.sc-corp.netOTHERYes-
Lens StudioBINARYYes-
Tier A - Core AssetsOTHERYes-
Tier B - Non Core (Bitmoji, Playcanvas)OTHERYes-
accounts.snapchat.comURLYes
ads.snapchat.comURLYes
app.snapchat.comURLYes
blog.playcanvas.comURLYes
business.snapchat.comURLYes
businesshelp.snapchat.comURLYes
code.playcanvas.comURLYes
com.bitstrips.imojiIOSYes-
com.bitstrips.imojiANDROIDYes
com.snapchat.androidANDROIDYes
com.toyopagroup.picabooIOSYes-
create.snapchat.comURLYes
developer.playcanvas.comURLYes
forum.playcanvas.comURLYes
geofilters.snapchat.comURLYes
https://lensstudio.snapchat.com/api/CODEYes-
kit.snapchat.comURLYes
launch.playcanvas.comURLYes
login.playcanvas.comURLYes
map.snapchat.comURLYes
msg.playcanvas.comURLYes
my.snapchat.comURLYes
playcanv.asURLYes
playcanvas.comURLYes
relay.playcanvas.comURLYes
rt.playcanvas.comURLYes
scan.snapchat.comURLYes
snappublisher.snapchat.comURLYes
spectacles.comURLYes
store.playcanvas.comURLYes
store.snapchat.comURLYes
story.snapchat.comURLYes
web.snapchat.comURLYes
www.bitmoji.comURLYes
www.bitstrips.comURLYes
Out-of-Scope Assets (6)
AssetCategoryBounty
SpectaclesHARDWARENo
Spectacles charging caseHARDWARENo
dev.playcanv.asURLNo
http://dev*.playcanvas.comWILDCARDNo
returns.spectacles.comURLNo
support.snapchat.comURLNo
Scope Changes (132)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedwww.bitmoji.comURLIn Scope19:08
Addedsupport.snapchat.comURLOut of Scope19:08
Addedmy.snapchat.comURLIn Scope19:08
Addedrelay.playcanvas.comURLIn Scope19:08
Addeddev*.playcanvas.comWILDCARDOut of Scope19:08
Addedspectacles charging caseHARDWAREOut of Scope19:08
Addedmsg.playcanvas.comURLIn Scope19:08
Addedcode.playcanvas.comURLIn Scope19:08
AddedspectaclesHARDWAREOut of Scope19:08
Addedmap.snapchat.comURLIn Scope19:08
Addedtier a - core assetsOTHERIn Scope19:08
Addedlaunch.playcanvas.comURLIn Scope19:08
Addedgeofilters.snapchat.comURLIn Scope19:08
Addedcom.bitstrips.imojiANDROIDIn Scope19:08
Addedstore.snapchat.comURLIn Scope19:08
Addedforum.playcanvas.comURLIn Scope19:08
Addedweb.snapchat.comURLIn Scope19:08
Addedaccounts.snapchat.comURLIn Scope19:08
Addedsnappublisher.snapchat.comURLIn Scope19:08
Addedwww.bitstrips.comURLIn Scope19:08
Addedstore.playcanvas.comURLIn Scope19:08
Addedbusinesshelp.snapchat.comURLIn Scope19:08
Addedads.snapchat.comURLIn Scope19:08
Addedrt.playcanvas.comURLIn Scope19:08
Addedlogin.playcanvas.comURLIn Scope19:08
Addedcom.snapchat.androidANDROIDIn Scope19:08
Addedreturns.spectacles.comURLOut of Scope19:08
Addedhttps://lensstudio.snapchat.com/apiURLIn Scope19:08
Addedtier b - non core (bitmoji, playcanvas)OTHERIn Scope19:08
Added*.sc-corp.netWILDCARDIn Scope19:08
Addedplaycanv.asURLIn Scope19:08
Addedblog.playcanvas.comURLIn Scope19:08
Addedapp.snapchat.comURLIn Scope19:08
Addedcom.bitstrips.imojiIOSIn Scope19:08
Addeddev.playcanv.asURLOut of Scope19:08
Addedbusiness.snapchat.comURLIn Scope19:08
Addedcreate.snapchat.comURLIn Scope19:08
Addedstory.snapchat.comURLIn Scope19:08
Addedplaycanvas.comURLIn Scope19:08
Addeddeveloper.playcanvas.comURLIn Scope19:08
Addedcom.toyopagroup.picabooIOSIn Scope19:08
Addedscan.snapchat.comURLIn Scope19:08
Addedkit.snapchat.comURLIn Scope19:08
Addedspectacles.comURLIn Scope19:08
Addedlens studioOTHERIn Scope19:08
Added*.sc-core.netWILDCARDIn Scope19:08
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedplaycanvas.comURLIn Scope00:40
Addedforum.playcanvas.comURLIn Scope00:40
Addedhttps://lensstudio.snapchat.com/apiURLIn Scope00:40
Addedsupport.snapchat.comURLOut of Scope00:40
AddedspectaclesHARDWAREOut of Scope00:40
Addeddev*.playcanvas.comWILDCARDOut of Scope00:40
Addedwww.bitmoji.comURLIn Scope00:40
Addedgeofilters.snapchat.comURLIn Scope00:40
Addeddev.playcanv.asURLOut of Scope00:40
Addedscan.snapchat.comURLIn Scope00:40
Addedlaunch.playcanvas.comURLIn Scope00:40
Addedrelay.playcanvas.comURLIn Scope00:40
Addedstore.playcanvas.comURLIn Scope00:40
Addedbusinesshelp.snapchat.comURLIn Scope00:40
Addedstore.snapchat.comURLIn Scope00:40
Addedspectacles charging caseHARDWAREOut of Scope00:40
Addedweb.snapchat.comURLIn Scope00:40
Addedmap.snapchat.comURLIn Scope00:40
Addedstory.snapchat.comURLIn Scope00:40
Addedads.snapchat.comURLIn Scope00:40
Addedcom.bitstrips.imojiIOSIn Scope00:40
Addedwww.bitstrips.comURLIn Scope00:40
Addedlogin.playcanvas.comURLIn Scope00:40
Addedrt.playcanvas.comURLIn Scope00:40
Addedtier b - non core (bitmoji, playcanvas)OTHERIn Scope00:40
Addedlens studioOTHERIn Scope00:40
Added*.sc-core.netWILDCARDIn Scope00:40
Addedmy.snapchat.comURLIn Scope00:40
Addedkit.snapchat.comURLIn Scope00:40
Addedspectacles.comURLIn Scope00:40
Addedaccounts.snapchat.comURLIn Scope00:40
Addedcode.playcanvas.comURLIn Scope00:40
Addedcreate.snapchat.comURLIn Scope00:40
Addedreturns.spectacles.comURLOut of Scope00:40
Addedtier a - core assetsOTHERIn Scope00:40
Addedcom.toyopagroup.picabooIOSIn Scope00:40
Addedcom.snapchat.androidANDROIDIn Scope00:40
Addedapp.snapchat.comURLIn Scope00:40
Addeddeveloper.playcanvas.comURLIn Scope00:40
Addedcom.bitstrips.imojiANDROIDIn Scope00:40
Addedsnappublisher.snapchat.comURLIn Scope00:40
Addedblog.playcanvas.comURLIn Scope00:40
Addedmsg.playcanvas.comURLIn Scope00:40
Addedplaycanv.asURLIn Scope00:40
Added*.sc-corp.netWILDCARDIn Scope00:40
Addedbusiness.snapchat.comURLIn Scope00:40
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedcom.bitstrips.imojiIOSIn Scope21:38
Removedstore.snapchat.comURLIn Scope21:38
Removedhttps://lensstudio.snapchat.com/apiCODEIn Scope21:38
Removedbusinesshelp.snapchat.comURLIn Scope21:38
Removedmy.snapchat.comURLIn Scope21:38
Removedbusiness.snapchat.comURLIn Scope21:38
Removedcreate.snapchat.comURLIn Scope21:38
Removed*.sc-core.netURLIn Scope21:38
Removedads.snapchat.comURLIn Scope21:38
Removedstory.snapchat.comURLIn Scope21:38
Removedmap.snapchat.comURLIn Scope21:38
Removedlens studioBINARYIn Scope21:38
Removedtier b - non core (bitmoji, playcanvas)OTHERIn Scope21:38
Removedtier a - core assetsOTHERIn Scope21:38
Removed*.sc-corp.netOTHERIn Scope21:38
Removedplaycanv.asURLIn Scope21:38
Removedstore.playcanvas.comURLIn Scope21:38
Removedrt.playcanvas.comURLIn Scope21:38
Removedrelay.playcanvas.comURLIn Scope21:38
Removedplaycanvas.comURLIn Scope21:38
Removedmsg.playcanvas.comURLIn Scope21:38
Removedlogin.playcanvas.comURLIn Scope21:38
Removedlaunch.playcanvas.comURLIn Scope21:38
Removedforum.playcanvas.comURLIn Scope21:38
Removeddeveloper.playcanvas.comURLIn Scope21:38
Removedcode.playcanvas.comURLIn Scope21:38
Removedblog.playcanvas.comURLIn Scope21:38
Removedweb.snapchat.comURLIn Scope21:38
Removedapp.snapchat.comURLIn Scope21:38
Removedaccounts.snapchat.comURLIn Scope21:38
Removedspectacles.comURLIn Scope21:38
Removedgeofilters.snapchat.comURLIn Scope21:38
Removedsnappublisher.snapchat.comURLIn Scope21:38
Removedkit.snapchat.comURLIn Scope21:38
Removedscan.snapchat.comURLIn Scope21:38
Removedwww.bitstrips.comURLIn Scope21:38
Removedwww.bitmoji.comURLIn Scope21:38
Removedcom.snapchat.androidANDROIDIn Scope21:38
Removedcom.toyopagroup.picabooIOSIn Scope21:38
Removedcom.bitstrips.imojiANDROIDIn Scope21:38