Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
2
Paid in this view
$665k
  • mediumPGN-10318· undisclosed

    Mobile banking PIN retry counter resets on app reinstall

    Not disclosed. Private program.

    Tessera Bank@quietcoilImproper Restriction of Excessive Authentication Attempts06 Nov 2026triage 8.3h
    $5,000
    Triaged
  • criticalPGN-10399

    OCPP simulator can register as an existing charger id and receive its remote-start commands

    Boot notifications were trusted by charger id alone within the researcher's provisioned virtual fleet.

    Voltgrid@quietcoilImproper Authentication02 Oct 2026triage 7.5hresolved 7.1d
    $45,000
    Resolved
Hacktivity
Connecting
  • Mobile banking PIN retry counter resets on app reinstall
    medium
    $5,000
  • Bounty paidVoltgrid@quietcoil
    OCPP simulator can register as an existing charger id and receive its remote-start commands
    critical
    $45k