| Company | Asset | Asset Type | Coverage | Severity | Bounty | Create Date | Resolved |
|---|---|---|---|---|---|---|---|
| OPPO | https://communityin.oppo.com/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://community.oppo.com/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/ru/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/in/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/id/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/global/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | https://c.realme.com/eg/ | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | http://open.oppomobile.com | Url | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | com.katanlabs.worm.ioeatemall | WindowsMicrosoftStore | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | com.fullmetalgamedev.fruitshooting | AndroidApk | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | com.katanlabs.matchballgame | AndroidApk | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| OPPO | com.katanlabs.bubblepop | AndroidApk | In Scope | Critical | Eligible | 2026-04-28 | 0 |
| Automattic | parse.ly | Domain | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Banco Plata | *.bancoplata.mx | Wildcard | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-rustzone | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-relay-messages | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-secure-element | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-messages | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-core | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-firmware | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| Tools for Humanity | https://github.com/worldcoin/orb-software | SourceCode | In Scope | Critical | Eligible | 2026-04-27 | 0 |
| OPPO | https://developers.oppomobile.com/ | Url | In Scope | Critical | Eligible | 2026-04-23 | 0 |
| Superbet | *.superbet.gr | Wildcard | In Scope | Critical | Eligible | 2026-04-23 | 0 |
| Crypto.com | https://explorer.cronos.org/token/0x2e53c5586e12a99d4CAE366E9Fc5C14fE9c6495d | SmartContract | In Scope | Critical | Eligible | 2026-04-22 | 0 |
| Circle BBP | https://github.com/circlefin/stablecoin-xlm | SourceCode | In Scope | Critical | Eligible | 2026-04-21 | 0 |
| Malwarebytes | cloud.threatdown.com | Domain | In Scope | Critical | Eligible | 2026-04-21 | 0 |
| Meesho | meesho.io | Domain | In Scope | Low | Eligible | 2026-04-20 | 0 |
| Spotify | DRM (Digital Rights Management) System | OtherAsset | In Scope | Critical | Eligible | 2026-04-20 | 0 |
| hostinger | Managed OpenClaw | OtherAsset | In Scope | Critical | Eligible | 2026-04-17 | 0 |
| 23andMe Bug Bounty | 23andmeresearchinstitute.org | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| 23andMe Bug Bounty | trust.23andme.com | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| 23andMe Bug Bounty | discover.23andme.com | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| 23andMe Bug Bounty | fulfillment.23andme.com | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| 23andMe Bug Bounty | style.23andme.com | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| 23andMe Bug Bounty | portal.23andme.com | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| 23andMe Bug Bounty | merch.23andme.com | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| 23andMe Bug Bounty | refer.23andme.com | Domain | In Scope | Critical | Eligible | 2026-04-15 | 0 |
| Adobe | Stock AI Studio | OtherAsset | In Scope | Critical | Eligible | 2026-04-14 | 0 |
| hostinger | http://payments.hostinger.com | Url | In Scope | Critical | Eligible | 2026-04-14 | 0 |
| Crypto.com | travel.crypto.com | Domain | In Scope | Low | Eligible | 2026-04-13 | 0 |
| Magic Eden | api.dicey.com | Domain | In Scope | Critical | Eligible | 2026-04-09 | 0 |
| Automattic | WP Cloud | OtherAsset | In Scope | Critical | Eligible | 2026-04-08 | 0 |
| Circle BBP | https://github.com/circlefin/arc-node | SourceCode | In Scope | Critical | Eligible | 2026-04-08 | 0 |
| Circle BBP | rpc.testnet.arc.network | Domain | In Scope | Critical | Eligible | 2026-04-08 | 0 |
| Circle BBP | rpc.blockdaemon.testnet.arc.network | Domain | In Scope | Critical | Eligible | 2026-04-08 | 0 |
| Circle BBP | rpc.quicknode.testnet.arc.network | Domain | In Scope | Critical | Eligible | 2026-04-08 | 0 |
| Circle BBP | rpc.drpc.testnet.arc.network | Domain | In Scope | Critical | Eligible | 2026-04-08 | 0 |
| Early Warning | www.certos.com | Domain | In Scope | Critical | Eligible | 2026-04-02 | 0 |
| hostinger | agents.hostinger.com | Domain | In Scope | Critical | Eligible | 2026-03-30 | 2 |
| Visa | https://ebctest.cybersource.com/kms/ | Url | In Scope | Critical | Eligible | 2026-03-26 | 0 |