Peregrine
Start hunting
Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
2
Paid in this view
$665k
Severityallcriticalhighmediumlow
Stateallresolvedtriagednewduplicateinformative
Filtered by @yara.v ×
  • mediumPGN-10312· undisclosed

    Fleet console session fixation via pre-auth cookie

    Under remediation.

    Axiom Robotics@yara.vSession Fixation07 Nov 2026triage 43h
    —
    Triaged
  • highPGN-10451

    Store checkout race duplicates limited cosmetic on concurrent redeem

    Thirty sequential redeem calls succeeded before the first test of concurrency; the inventory check and grant were not atomic.

    Kiln Games@yara.vRace Condition18 Oct 2026triage 36hresolved 11.7d
    $6,500
    Resolved
Hacktivity
Connecting
  • TriagedAxiom Robotics@yara.v
    Fleet console session fixation via pre-auth cookie
    medium
    4d ago
  • Bounty paidKiln Games@yara.v
    Store checkout race duplicates limited cosmetic on concurrent redeem
    high
    $6,500
All disclosed reports →