Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
1
Paid in this view
$665k
  • criticalPGN-10399

    OCPP simulator can register as an existing charger id and receive its remote-start commands

    Boot notifications were trusted by charger id alone within the researcher's provisioned virtual fleet.

    Voltgrid@quietcoilImproper Authentication02 Oct 2026triage 7.5hresolved 7.1d
    $45,000
    Resolved
Hacktivity
Connecting
  • Bounty paidVoltgrid@quietcoil
    OCPP simulator can register as an existing charger id and receive its remote-start commands
    critical
    $45k