← Leaderboard
#2 · 90 days#2 · all timeTop 10 · 2025
@saltmarsh
🇬🇧member since 14 Jun 2022·SAML · OAuth · Session
Reputation
16,930
Signal
7.1
avg severity of valid reports
Impact
29.8
bounty-weighted
Earned, 90d
$74.5k
Earned, all time
$548k
Valid reports
189
18-week streak
Disclosed reports · 3
$116k shown- highPGN-10307· undisclosed
Treasury export job runs with the requesting user's SAML attributes from a stale assertion
Under remediation.
—Triaged - criticalPGN-10482
SAML assertion accepted after signature element is relocated under a wrapped Response
A second Assertion placed before the signed one was processed by the relying-party parser while the signature check ran against the original. Proof used two researcher tenants.
$96,000Resolved - highPGN-10416· undisclosed
Open-banking consent screen approves scopes beyond those displayed
Not disclosed. Private program.
$20,000Resolved
Programs
Portable record
Every outcome on this profile is signed by the program that decided it. Export the record and verify it anywhere.
pgn record export @saltmarsh --sign