← Leaderboard
#16 · 90 days#16 · all time

@mokuren

🇰🇷member since 05 Nov 2023·Mobile · Deep links
Reputation
7,450
Signal
6.6
avg severity of valid reports
Impact
24.4
bounty-weighted
Earned, 90d
$24.5k
Earned, all time
$139k
Valid reports
83
6-week streak
Disclosed reports · 1
$2,800 shown
  • mediumPGN-10380

    Deep link in driver app leaks session token to arbitrary host via redirect

    The in-app browser forwarded the bearer token on cross-origin redirects initiated from a trusted deep link.

    VoltgridURL Redirection to Untrusted Site26 Sept 2026triage 20hresolved 6.1d
    $2,800
    Resolved
Programs
Portable record

Every outcome on this profile is signed by the program that decided it. Export the record and verify it anywhere.

pgn record export @mokuren --sign