Peregrine
Start hunting
Hacktivity

Every decision, on the record.

Resolved, duplicate and informative alike. Triage time and time-to-bounty are shown per report, because a platform that hides its misses is not measuring anything.

Disclosed
11
Paid in this view
$665k
Severityallcriticalhighmediumlow
Stateallresolvedtriagednewduplicateinformative
  • criticalPGN-10482

    SAML assertion accepted after signature element is relocated under a wrapped Response

    A second Assertion placed before the signed one was processed by the relying-party parser while the signature check ran against the original. Proof used two researcher tenants.

    Stratos ID@saltmarshImproper Verification of Cryptographic Signature29 Oct 2026triage 3.5hresolved 4.3d
    $96,000
    Resolved
  • criticalPGN-10479

    Cross-tenant secret read via node-local metadata proxy in shared edge pool

    Pods on the edge pool could reach a node-local proxy that did not scope credentials by namespace. The proof read a secret from a second researcher-owned tenant only.

    Orbitstack@ovisImproper Isolation or Compartmentalization27 Oct 2026triage 5.8hresolved 4.6d
    $85,000
    Resolved
  • criticalPGN-10471

    Password reset email array accepts two recipients when body is sent as JSON

    The form-encoded reset endpoint also accepted JSON; an array value for email delivered the reset link to both addresses. Victim account was a second researcher account.

    Quillnote@kestrel_0xImproper Authorization25 Oct 2026triage 18hresolved 4.9d
    $24,000
    Resolved
  • criticalPGN-10468

    Issuing API lets a sandbox key approve authorizations on a live card program it does not own

    Authorization-decision webhooks were matched by card-program id without checking the key's environment. Two researcher programs were used; no third-party funds moved.

    Helixpay@rookImproper Authorization24 Oct 2026triage 12hresolved 7.2d
    $60,000
    Resolved
  • criticalPGN-10439· undisclosed

    FHIR $everything operation returns documents across seeded test clinics

    Not disclosed. Private program.

    Meridian Health@sableImproper Authorization15 Oct 2026triage 22hresolved 12.1d
    $32,000
    Resolved
  • criticalPGN-10433

    Electron renderer escapes sandbox through embed preview protocol handler

    A crafted embed URL reached a privileged protocol handler from the renderer. Proof launched the calculator on the researcher's own machine.

    Quillnote@ptr_nullImproper Control of Dynamically-Managed Code Resources13 Oct 2026triage 17hresolved 9.9d
    $28,000
    Resolved
  • criticalPGN-10428

    Passkey ceremony accepts attestation for a different relying-party id under a wildcard origin

    rpIdHash was compared against a wildcard-expanded set that included a sibling subdomain the researcher controlled.

    Stratos ID@ilseImproper Authentication11 Oct 2026triage 3.3hresolved 4.5d
    $70,000
    Resolved
  • criticalPGN-10399

    OCPP simulator can register as an existing charger id and receive its remote-start commands

    Boot notifications were trusted by charger id alone within the researcher's provisioned virtual fleet.

    Voltgrid@quietcoilImproper Authentication02 Oct 2026triage 7.5hresolved 7.1d
    $45,000
    Resolved
  • criticalPGN-10361

    Duplicate: SAML assertion wrapping on connect broker

    Duplicate of a report submitted 2026-09-19T22:04Z. The reporter received signal credit and the original timestamp was shown at triage.

    Ledgerline@n0ctisImproper Verification of Cryptographic Signature20 Sept 2026triage 4.5h
    —
    Duplicate
  • criticalPGN-10349

    HelixVault withdraw path skips share recomputation after emergency pause lift

    Reproduced on a mainnet fork with a Foundry test; the top of the critical band was paid without negotiation.

    Helixpay@glasswingIncorrect Calculation15 Sept 2026triage 5.5hresolved 6.9d
    $75,000
    Resolved
  • criticalPGN-10324

    Symlink inside workspace import archive reads server configuration

    The import worker extracted archives with symlinks intact. The proof read the worker's own environment file and nothing else.

    Quillnote@n0ctisImproper Link Resolution Before File Access08 Sept 2026triage 13hresolved 7.8d
    $26,000
    Resolved
Hacktivity
Connecting
  • Bounty paidStratos ID@saltmarsh
    SAML assertion accepted after signature element is relocated under a wrapped Response
    critical
    $96k
  • Bounty paidOrbitstack@ovis
    Cross-tenant secret read via node-local metadata proxy in shared edge pool
    critical
    $85k
  • Bounty paidQuillnote@kestrel_0x
    Password reset email array accepts two recipients when body is sent as JSON
    critical
    $24k
  • Bounty paidHelixpay@rook
    Issuing API lets a sandbox key approve authorizations on a live card program it does not own
    critical
    $60k
  • Bounty paidMeridian Health@sable
    FHIR $everything operation returns documents across seeded test clinics
    critical
    $32k
  • Bounty paidQuillnote@ptr_null
    Electron renderer escapes sandbox through embed preview protocol handler
    critical
    $28k
All disclosed reports →