← Leaderboard
#8 · 90 days#15 · all timeRising

@ilse

🇸🇪member since 16 Feb 2024·WebAuthn · OIDC
Reputation
7,920
Signal
7.3
avg severity of valid reports
Impact
29.0
bounty-weighted
Earned, 90d
$41k
Earned, all time
$152k
Valid reports
46
13-week streak
Disclosed reports · 1
$70k shown
  • criticalPGN-10428

    Passkey ceremony accepts attestation for a different relying-party id under a wildcard origin

    rpIdHash was compared against a wildcard-expanded set that included a sibling subdomain the researcher controlled.

    Stratos IDImproper Authentication11 Oct 2026triage 3.3hresolved 4.5d
    $70,000
    Resolved
Programs
Portable record

Every outcome on this profile is signed by the program that decided it. Export the record and verify it anywhere.

pgn record export @ilse --sign