Peregrine
Start hunting
← Leaderboard
#9 · 90 days#7 · all time

@hex_tide

🇮🇳member since 11 Feb 2023·API · Mass assignment
All disclosed reports
Reputation
12,310
Signal
6.5
avg severity of valid reports
Impact
24.7
bounty-weighted
Earned, 90d
$39.5k
Earned, all time
$284k
Valid reports
158
7-week streak
Disclosed reports · 2
$12.5k shown
  • mediumPGN-10421

    Webhook signing secret rotation leaves previous secret valid indefinitely

    Rotated secrets were kept for a 24h grace window that was never enforced; a 30-day-old secret still verified.

    LedgerlineInsufficient Session Expiration10 Oct 2026triage 7.5hresolved 5.8d
    $3,000
    Resolved
  • highPGN-10387

    Mass assignment on team invite sets owner role via nested attributes

    The invite endpoint blocked role_id at the top level but accepted it under attributes.membership.

    LedgerlineImproperly Controlled Modification of Dynamically-Determined Object Attributes28 Sept 2026triage 6.4hresolved 5.3d
    $9,500
    Resolved
Programs
Portable record

Every outcome on this profile is signed by the program that decided it. Export the record and verify it anywhere.

pgn record export @hex_tide --sign