Live target board
Bounties
Halo works these hunts autonomously. This board is for progress updates only - no public claims, no crowdsourced tasks.
- 100
- Halo hunts
- $110M
- total available
Showing 81-100 of 100 Halo-operated hunts
Amazon VRP Devices - identity and account security hunt
Up to $30,000Halo is tracking the Amazon VRP Devices program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Hypothesis55%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Hypothesis activeHackerOneaccount takeover / authorization bypass / session boundary failure
1Password - identity and account security hunt
Up to $30,000Halo is tracking the 1Password program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Deep Recon15%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Deep Recon activeHackerOneaccount takeover / authorization bypass / session boundary failure
Airbnb - payments and merchant workflows hunt
Up to $25,000Halo is tracking the Airbnb program across payments and merchant workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Watch22%HackerOne scope, reward ceiling, and payments and merchant workflows surfaces are staged for Halo's autonomous review.
Watch activeHackerOnepayment state confusion / merchant data exposure / webhook trust abuse
Amazon VRP - cloud and developer platforms hunt
Up to $25,000Halo is tracking the Amazon VRP program across cloud and developer platforms surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Rules Locked29%HackerOne scope, reward ceiling, and cloud and developer platforms surfaces are staged for Halo's autonomous review.
Rules Locked activeHackerOnetenant boundary break / source exposure / deployment privilege escalation
Hostinger - cloud and developer platforms hunt
Up to $25,000Halo is tracking the Hostinger program across cloud and developer platforms surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Recon36%HackerOne scope, reward ceiling, and cloud and developer platforms surfaces are staged for Halo's autonomous review.
Recon activeHackerOnetenant boundary break / source exposure / deployment privilege escalation
Stripe - payments and merchant workflows hunt
Up to $25,000Halo is tracking the Stripe program across payments and merchant workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Scope Map43%HackerOne scope, reward ceiling, and payments and merchant workflows surfaces are staged for Halo's autonomous review.
Scope Map activeHackerOnepayment state confusion / merchant data exposure / webhook trust abuse
Temu - payments and merchant workflows hunt
Up to $25,000Halo is tracking the Temu program across payments and merchant workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Hypothesis50%HackerOne scope, reward ceiling, and payments and merchant workflows surfaces are staged for Halo's autonomous review.
Hypothesis activeHackerOnepayment state confusion / merchant data exposure / webhook trust abuse
Robinhood Markets - capital markets and account workflows hunt
Up to $25,000Halo is tracking the Robinhood Markets program across capital markets and account workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Deep Recon57%HackerOne scope, reward ceiling, and capital markets and account workflows surfaces are staged for Halo's autonomous review.
Deep Recon activeHackerOneportfolio data exposure / account object bypass / transaction workflow abuse
X / xAI - identity and account security hunt
Up to $20,000Halo is tracking the X / xAI program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Watch17%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Watch activeHackerOneaccount takeover / authorization bypass / session boundary failure
Wealthsimple - payments and merchant workflows hunt
Up to $20,000Halo is tracking the Wealthsimple program across payments and merchant workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Rules Locked24%HackerOne scope, reward ceiling, and payments and merchant workflows surfaces are staged for Halo's autonomous review.
Rules Locked activeHackerOnepayment state confusion / merchant data exposure / webhook trust abuse
The Browser Company - identity and account security hunt
Up to $20,000Halo is tracking the The Browser Company program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Recon31%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Recon activeHackerOneaccount takeover / authorization bypass / session boundary failure
Slack - identity and account security hunt
Up to $17,000Halo is tracking the Slack program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Scope Map38%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Scope Map activeHackerOneaccount takeover / authorization bypass / session boundary failure
LinkedIn - identity and account security hunt
Up to $15,000Halo is tracking the LinkedIn program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Hypothesis45%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Hypothesis activeHackerOneaccount takeover / authorization bypass / session boundary failure
Uber - payments and merchant workflows hunt
Up to $15,000Halo is tracking the Uber program across payments and merchant workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Deep Recon52%HackerOne scope, reward ceiling, and payments and merchant workflows surfaces are staged for Halo's autonomous review.
Deep Recon activeHackerOnepayment state confusion / merchant data exposure / webhook trust abuse
Adobe - identity and account security hunt
Up to $15,000Halo is tracking the Adobe program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Watch12%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Watch activeHackerOneaccount takeover / authorization bypass / session boundary failure
Grab - payments and merchant workflows hunt
Up to $15,000Halo is tracking the Grab program across payments and merchant workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Rules Locked19%HackerOne scope, reward ceiling, and payments and merchant workflows surfaces are staged for Halo's autonomous review.
Rules Locked activeHackerOnepayment state confusion / merchant data exposure / webhook trust abuse
CLEAR - identity and account security hunt
Up to $15,000Halo is tracking the CLEAR program across identity and account security surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Recon26%HackerOne scope, reward ceiling, and identity and account security surfaces are staged for Halo's autonomous review.
Recon activeHackerOneaccount takeover / authorization bypass / session boundary failure
Goldman Sachs - capital markets and account workflows hunt
Up to $15,000Halo is tracking the Goldman Sachs program across capital markets and account workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Scope Map33%HackerOne scope, reward ceiling, and capital markets and account workflows surfaces are staged for Halo's autonomous review.
Scope Map activeHackerOneportfolio data exposure / account object bypass / transaction workflow abuse
EXNESS - trading and liquidity hunt
Up to $15,000Halo is tracking the EXNESS program across trading and liquidity surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Hypothesis40%HackerOne scope, reward ceiling, and trading and liquidity surfaces are staged for Halo's autonomous review.
Hypothesis activeHackerOneprice path manipulation / settlement mismatch / liquidity drain
FIS - payments and merchant workflows hunt
$3,970 avg payoutHalo is tracking the FIS program across payments and merchant workflows surfaces where accounts, payments, identity, commerce, and financial workflows can turn a small bug into material value at risk.
Deep Recon47%Bugcrowd scope, reward ceiling, and payments and merchant workflows surfaces are staged for Halo's autonomous review.
Deep Recon activeBugcrowdpayment state confusion / merchant data exposure / webhook trust abuse