Scope Updates

Recent changes to bug bounty program scopes.

	Asset / Change	Scope Type	Program URL	Platform	Timestamp
+	Program Removed		https://bugcrowd.com/engagements/canva	bugcrowd	2025-06-05 00:07
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Added		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 23:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Removed		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 22:38
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Added		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 22:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
	Asset Added: URL: connect.com	Out of Scope	https://hackerone.com/hubspot	hackerone	2025-06-04 22:07
	Asset Removed: URL: connect.com	In Scope	https://hackerone.com/hubspot	hackerone	2025-06-04 22:07
+	Program Removed		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 21:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Added		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 19:37
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Removed		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 19:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Added		https://bugcrowd.com/engagements/quintoandar	bugcrowd	2025-06-04 18:38
Associated Assets: WEBSITE: https://www.quintoandar.com.br/* WEBSITE: https://www.user.quintoandar.com.br/admin/* WEBSITE: https://www.financeiro.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/pixar-api/* WEBSITE: https://finance.quintoandar.com.br/* API: https://trato-feito-api.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/checkout-api/* API: https://apigw.prod.quintoandar.com.br/docx-api/* API: https://apigw.prod.quintoandar.com.br/sales-flow-api/* API: https://apigw.prod.quintoandar.com.br/nazare-api/* API: https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*
+	Program Removed		https://bugcrowd.com/engagements/quintoandar	bugcrowd	2025-06-04 18:09
Associated Assets: WEBSITE: https://www.quintoandar.com.br/* WEBSITE: https://www.user.quintoandar.com.br/admin/* WEBSITE: https://www.financeiro.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/pixar-api/* WEBSITE: https://finance.quintoandar.com.br/* API: https://trato-feito-api.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/checkout-api/* API: https://apigw.prod.quintoandar.com.br/docx-api/* API: https://apigw.prod.quintoandar.com.br/sales-flow-api/* API: https://apigw.prod.quintoandar.com.br/nazare-api/* API: https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*
+	Program Added		https://bugcrowd.com/engagements/CCData-mbb-og	bugcrowd	2025-06-04 14:08
Associated Assets: API: http://data-api.coindesk.com/ WEBSITE: https://www.coindesk.com/ WEBSITE: https://uat.coindesk.com/ WEBSITE: https://events.coindesk.com WEBSITE: https://consensus2025.coindesk.com/ WEBSITE: https://consensus-hongkong2025.coindesk.com/ WEBSITE: https://data.coindesk.com/ WEBSITE: https://developers.coindesk.com
	Asset Added: WILDCARD: *.cyral.com	Out of Scope	https://hackerone.com/varonis	hackerone	2025-06-04 13:27
+	Program Added		https://bugcrowd.com/engagements/bolt-og	bugcrowd	2025-06-04 10:07
Associated Assets: ANDROID: https://bugcrowd.com/engagements/bolt-og/attachments/f30f56a1-8727-491b-85c4-914467daa09c IOS: https://bugcrowd.com/engagements/bolt-og/attachments/568e20f8-2915-4c28-80ba-93e14aa3a1d1 IOS: https://apps.apple.com/ee/app/bolt-fast-affordable-rides/id675033630 ANDROID: https://play.google.com/store/apps/details?id=ee.mtakso.client IOS: https://apps.apple.com/ee/app/bolt-food/id1451492388 ANDROID: https://play.google.com/store/apps/details?id=com.bolt.deliveryclient WEBSITE: .taxify.eu WEBSITE: https://bolt.eu/ ANDROID: https://play.google.com/store/apps/details?id=ee.mtakso.driver IOS: https://apps.apple.com/ee/app/bolt-driver/id897442736 WEBSITE: .test.bolt.eu WEBSITE: *.test.taxify.eu WEBSITE: business-old.bolt.eu
+	Program Added		https://app.intigriti.c...ane/arkanenetwork/detail	intigriti	2025-06-04 08:00
Associated Assets: URL: api-wallet.venly.io URL: api.arkane.network URL: connect.arkane.network URL: connect.venly.io URL: login.arkane.network URL: login.venly.io URL: wallet.venly.io URL: api-wallet-sandbox.venly.io
	Asset Added: OTHER: Mobile Apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Removed: OTHER: Avtoelon mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Removed: OTHER: Kolesa mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Removed: OTHER: Krisha mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Added: OTHER: Kolesa mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 06:17
	Asset Added: OTHER: Krisha website	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 06:17
	Asset Added: OTHER: Krisha mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 06:17
	Asset Added: OTHER: Avtoelon website	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 06:17
	Asset Added: OTHER: Avtoelon mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 06:17
	Asset Added: OTHER: Kolesa website	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 06:12

Scope Updates

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets: