Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
1
Paid in this view
$665k
  • highPGN-10416· undisclosed

    Open-banking consent screen approves scopes beyond those displayed

    Not disclosed. Private program.

    Tessera Bank@saltmarshImproper Authorization08 Oct 2026triage 15hresolved 8.9d
    $20,000
    Resolved
Hacktivity
Connecting
  • Bounty paidTessera Bank@saltmarsh
    Open-banking consent screen approves scopes beyond those displayed
    high
    $20k