Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed

Paid in this view

$665k

Severityall critical high medium low

Stateall resolved triaged new duplicate informative

Filtered by @saltmarsh ×

highPGN-10307· undisclosed
Treasury export job runs with the requesting user's SAML attributes from a stale assertion
Under remediation.
Ledgerline @saltmarshInsufficient Session Expiration08 Nov 2026triage 7.5h
—
Triaged

Hacktivity

Connecting

TriagedLedgerline @saltmarsh
Treasury export job runs with the requesting user's SAML attributes from a stale assertion
high
5d ago

All disclosed reports →

Every decision, on the record.

Treasury export job runs with the requesting user's SAML attributes from a stale assertion