Program Removed
This program is no longer available on YesWeHack. The scope data shown below is historical and may not reflect the final state of the program.
tchap-public
10
In Scope
2
Out of Scope
In-Scope Assets (10)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| https://apps.apple.com/fr/app/tchap/id1446253779 | IOS | Yes | - | |
| https://github.com/tchapgouv | URL | Yes | ||
| https://matrix.agent.tchap.gouv.fr | URL | Yes | ||
| https://matrix.e.tchap.gouv.fr | URL | Yes | ||
| https://matrix.i.tchap.gouv.fr | URL | Yes | ||
| https://play.google.com/store/apps/details?id=fr.gouv.tchap.a&hl=fr | ANDROID | Yes | ||
| https://www.beta.tchap.gouv.fr | URL | Yes | ||
| https://www.tchap.gouv.fr | URL | Yes | ||
| specific scenarios (see program description) | OTHER | Yes | - | |
| tchap.gouv.fr | WILDCARD | Yes |
Out-of-Scope Assets (2)
| Asset | Category | Bounty | |
|---|---|---|---|
| everything that not listed as in scope is to be considered as out of scope of this program | OTHER | Yes | |
| please note that tchap is hosted by a third party and thus vulnerabilities related to the host are out of the scope | OTHER | Yes |
Scope Changes (39)
May 20, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 07:26 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://matrix.agent.tchap.gouv.fr | URL | In Scope | 19:09 |
| Added | https://play.google.com/store/apps/details?id=fr.gouv.tchap.a&hl=fr | ANDROID | In Scope | 19:09 |
| Added | specific scenarios (see program description) | OTHER | In Scope | 19:09 |
| Added | everything that not listed as in scope is to be considered as out of scope of this program | OTHER | Out of Scope | 19:09 |
| Added | please note that tchap is hosted by a third party and thus vulnerabilities related to the host are out of the scope | OTHER | Out of Scope | 19:09 |
| Added | https://www.tchap.gouv.fr | URL | In Scope | 19:09 |
| Added | matrix.agent.*.tchap.gouv.fr | WILDCARD | In Scope | 19:09 |
| Added | https://github.com/tchapgouv | URL | In Scope | 19:09 |
| Added | https://apps.apple.com/fr/app/tchap/id1446253779 | IOS | In Scope | 19:09 |
| Added | https://www.beta.tchap.gouv.fr | URL | In Scope | 19:09 |
| Added | https://matrix.i.tchap.gouv.fr | URL | In Scope | 19:09 |
| Added | https://matrix.e.tchap.gouv.fr | URL | In Scope | 19:09 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | specific scenarios (see program description) | OTHER | In Scope | 00:52 |
| Added | https://www.beta.tchap.gouv.fr | URL | In Scope | 00:52 |
| Added | https://matrix.e.tchap.gouv.fr | URL | In Scope | 00:52 |
| Added | matrix.agent.*.tchap.gouv.fr | WILDCARD | In Scope | 00:52 |
| Added | https://apps.apple.com/fr/app/tchap/id1446253779 | IOS | In Scope | 00:52 |
| Added | https://matrix.i.tchap.gouv.fr | URL | In Scope | 00:52 |
| Added | everything that not listed as in scope is to be considered as out of scope of this program | OTHER | Out of Scope | 00:52 |
| Added | please note that tchap is hosted by a third party and thus vulnerabilities related to the host are out of the scope | OTHER | Out of Scope | 00:52 |
| Added | https://www.tchap.gouv.fr | URL | In Scope | 00:52 |
| Added | https://matrix.agent.tchap.gouv.fr | URL | In Scope | 00:52 |
| Added | https://github.com/tchapgouv | URL | In Scope | 00:52 |
| Added | https://play.google.com/store/apps/details?id=fr.gouv.tchap.a&hl=fr | ANDROID | In Scope | 00:52 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | https://www.tchap.gouv.fr | URL | In Scope | 21:40 |
| Removed | https://matrix.agent.tchap.gouv.fr | URL | In Scope | 21:40 |
| Removed | matrix.agent.*.tchap.gouv.fr | URL | In Scope | 21:40 |
| Removed | https://github.com/tchapgouv | OTHER | In Scope | 21:40 |
| Removed | https://play.google.com/store/apps/details?id=fr.gouv.tchap.a&hl=fr | ANDROID | In Scope | 21:40 |
| Removed | https://apps.apple.com/fr/app/tchap/id1446253779 | IOS | In Scope | 21:40 |
| Removed | https://www.beta.tchap.gouv.fr | URL | In Scope | 21:40 |
| Removed | https://matrix.i.tchap.gouv.fr | URL | In Scope | 21:40 |
| Removed | https://matrix.e.tchap.gouv.fr | URL | In Scope | 21:40 |
| Removed | specific scenarios (see program description) | OTHER | In Scope | 21:40 |
| Removed | everything that not listed as in scope is to be considered as out of scope of this program | OTHER | Out of Scope | 21:40 |
| Removed | please note that tchap is hosted by a third party and thus vulnerabilities related to the host are out of the scope | OTHER | Out of Scope | 21:40 |
| Added | please note that tchap is hosted by a third party and thus vulnerabilities related to the host are out of the scope | OTHER | Out of Scope | 00:33 |
| Added | everything that not listed as in scope is to be considered as out of scope of this program | OTHER | Out of Scope | 00:33 |