Scope Updates
Recent changes to bug bounty program scopes.
| Change | Asset | Category | Scope | Program | Platform | Time |
|---|---|---|---|---|---|---|
| Added | fusion-demo.uat2.tradepmr.com | URL | Out of Scope | HackerOne | 2025-12-09 15:01 | |
| Added | insight2.tradepmr.com | URL | In Scope | HackerOne | 2025-12-09 15:01 | |
| Added | fusion.tradepmr.com | URL | In Scope | HackerOne | 2025-12-09 14:55 | |
| Added | www.tradepmr.com | URL | In Scope | HackerOne | 2025-12-09 14:55 | |
| Added | gc4x-api-sandbox.gocardless.com | URL | Out of Scope | HackerOne | 2025-12-08 12:50 | |
+Program Removed | — | — | — | HackerOne | 2025-12-08 10:30 | |
Associated Assets:CODEhttps://github.com/tronprotocol/java-tron | ||||||
+Program Added | — | — | — | HackerOne | 2025-12-05 23:35 | |
Associated Assets:OTHERvercel platform protection | ||||||
+Program Added | — | — | — | HackerOne | 2025-12-05 18:10 | |
Associated Assets:WILDCARD*.grammarly.io OTHERgrammarly browser extensions WILDCARD*.grammarlyaws.com IOScom.grammarly.keyboard ANDROIDcom.grammarly.android.keyboard BINARYgrammarly desktop for windows BINARYgrammarly desktop for macos WILDCARD*.grammarly.com OTHERcapture the flag URLapp.grammarly.com OTHERsuperhuman go URLsuperhuman.com WILDCARD*.superhuman.com URLgateway.superhuman.com URLid.superhuman.com URLsettings.superhuman.com OTHERcoda chrome extension URLcodacontent.io URLcodahosted.io IOSio.coda ANDROIDio.coda.codaapp URLcoda.grammarly.com URLcoda.io WILDCARD*.coda.io OTHERthird party external services URLstatus.coda.io OTHERsuperhuman mail | ||||||
+Program Removed | — | — | — | HackerOne | 2025-12-05 18:10 | |
Associated Assets:WILDCARD*.grammarly.io OTHERgrammarly browser extensions WILDCARD*.grammarlyaws.com IOScom.grammarly.keyboard ANDROIDcom.grammarly.android.keyboard BINARYgrammarly desktop for windows BINARYgrammarly desktop for macos WILDCARD*.grammarly.com OTHERcapture the flag URLapp.grammarly.com OTHERsuperhuman go URLsuperhuman.com WILDCARD*.superhuman.com URLgateway.superhuman.com URLid.superhuman.com URLsettings.superhuman.com OTHERcoda chrome extension URLcodacontent.io URLcodahosted.io IOSio.coda ANDROIDio.coda.codaapp URLcoda.grammarly.com URLcoda.io WILDCARD*.coda.io OTHERthird party external services URLstatus.coda.io OTHERsuperhuman mail | ||||||
| Removed | pd-api.polkadoc.com | URL | In Scope | HackerOne | 2025-12-04 08:40 | |
| Removed | sapi-live.lh.us-west-2.prd.23andme.us | URL | In Scope | HackerOne | 2025-12-04 08:40 | |
| Removed | healthaid.lemonaidhealth.com | URL | In Scope | HackerOne | 2025-12-04 08:40 | |
| Removed | lemonaidhealth.com | URL | In Scope | HackerOne | 2025-12-04 08:40 | |
| Removed | clinic.lemonaidhealth.com | URL | In Scope | HackerOne | 2025-12-04 08:40 | |
+Program Removed | — | — | — | HackerOne | 2025-12-03 19:05 | |
Associated Assets:URLwww.leather.io CODEhttps://github.com/leather-wallet/extension | ||||||
| Removed | com.spotify.lite | ANDROID | In Scope | HackerOne | 2025-12-03 18:10 | |
+Program Removed | — | — | — | HackerOne | 2025-12-03 17:15 | |
Associated Assets:URLstaging.hosted.mender.io CODEhttps://github.com/mendersoftware/mender CODEhttps://github.com/mendersoftware/mender-server CODEhttps://github.com/cfengine/core BINARYcfengine enterprise URLhosted.mender.io | ||||||
+Program Added | — | — | — | HackerOne | 2025-12-03 09:45 | |
Associated Assets:CODEhttps://github.com/cosmos/iavl CODEhttps://github.com/iqlusioninc/yubihsm.rs CODEhttps://github.com/iqlusioninc/tmkms CODEhttps://github.com/iqlusioninc/crates/tree/main/signatory CODEhttps://github.com/cosmos/ledger-cosmos CODEhttps://github.com/cosmos/gaia CODEhttps://github.com/cosmos/ics23 OTHERcosmwasm OTHERpacket forward middleware OTHERcometbft OTHERcosmos sdk OTHERibc-go OTHERhorcrux OTHERhermes relayer OTHERibc go relayer OTHERsolidity ibc eureka CODEhttps://github.com/skip-mev/go-fast-contracts CODEwww.github.com/cosmos/evm | ||||||
| Added | fizzy.do | URL | In Scope | HackerOne | 2025-12-03 05:10 | |
+Program Removed | — | — | — | HackerOne | 2025-12-03 02:05 | |
Associated Assets:WILDCARD*.line.me WILDCARD*.line-apps.com WILDCARD*.line.naver.jp ANDROIDjp.naver.line.android IOS443904275 BINARY9wzdncrfj2g6 OTHERchrome extension BINARYwindows executable IOS539883307 ANDROIDcom.linecorp.linelite OTHERline messenger - voom OTHERline messenger - keep OTHERline messenger - voip OTHERline messenger - chat OTHERline messenger - openchat OTHERline messenger - news WILDCARD*.line.biz WILDCARD*.linecorp.com URLhttp://recruit.linepluscorp.com OTHERline pay URLprod-fido-fido2-server.line-apps.com OTHER*nvapis.line.me OTHERlineman OTHERdemae-can OTHERyahoo japan URLhttps://entry.line.me/ OTHERlivedoor OTHERline taxi OTHERline bank OTHERline financial | ||||||
| Added | *.onduo.com | WILDCARD | Out of Scope | HackerOne | 2025-12-02 19:45 | |
| Added | onduo.com | URL | Out of Scope | HackerOne | 2025-12-02 19:45 | |
| Removed | *.onduo.com | WILDCARD | In Scope | HackerOne | 2025-12-02 19:45 | |
| Added | https://www.whosampled.com/ | URL | In Scope | HackerOne | 2025-12-02 19:25 | |
| Removed | https://www.whosampled.com/ | URL | Out of Scope | HackerOne | 2025-12-02 19:20 | |