Peregrine
Start hunting
Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
3
Paid in this view
$665k
Severityallcriticalhighmediumlow
Stateallresolvedtriagednewduplicateinformative
Filtered by program:voltgrid ×
  • highPGN-10463

    Settlement amount mutated after signature via delimiter-free field concatenation

    The HMAC covered concatenated fields with no separator, so a shifted boundary between amount and session id verified under the original signature.

    Voltgrid@nullwaveImproper Validation of Integrity Check Value22 Oct 2026triage 8.5hresolved 6.1d
    $16,000
    Resolved
  • criticalPGN-10399

    OCPP simulator can register as an existing charger id and receive its remote-start commands

    Boot notifications were trusted by charger id alone within the researcher's provisioned virtual fleet.

    Voltgrid@quietcoilImproper Authentication02 Oct 2026triage 7.5hresolved 7.1d
    $45,000
    Resolved
  • mediumPGN-10380

    Deep link in driver app leaks session token to arbitrary host via redirect

    The in-app browser forwarded the bearer token on cross-origin redirects initiated from a trusted deep link.

    Voltgrid@mokurenURL Redirection to Untrusted Site26 Sept 2026triage 20hresolved 6.1d
    $2,800
    Resolved
Hacktivity
Connecting
  • Bounty paidVoltgrid@nullwave
    Settlement amount mutated after signature via delimiter-free field concatenation
    high
    $16k
  • Bounty paidVoltgrid@quietcoil
    OCPP simulator can register as an existing charger id and receive its remote-start commands
    critical
    $45k
  • Bounty paidVoltgrid@mokuren
    Deep link in driver app leaks session token to arbitrary host via redirect
    medium
    $2,800
All disclosed reports →