← Leaderboard
#12 · 90 days#12 · all time
@rook
🇿🇦member since 14 Sept 2023·Business logic · Payments
Reputation
9,410
Signal
6.7
avg severity of valid reports
Impact
25.1
bounty-weighted
Earned, 90d
$33k
Earned, all time
$187k
Valid reports
89
11-week streak
Disclosed reports · 1
$60k shown- criticalPGN-10468
Issuing API lets a sandbox key approve authorizations on a live card program it does not own
Authorization-decision webhooks were matched by card-program id without checking the key's environment. Two researcher programs were used; no third-party funds moved.
$60,000Resolved
Programs
Portable record
Every outcome on this profile is signed by the program that decided it. Export the record and verify it anywhere.
pgn record export @rook --sign