← All programs
Private · inviteBankingManaged triageSafe harborNo disclosure
Tessera Bank
Digital-only bank with 2.4M retail customers.
Escrowed · $1.5Mlaunched 20 May 2025
pgn scope pull tessera-bank
Submit report Response, measured
last 90 daysMedian triage
12h
commitment 24h
Median to bounty
8d
commitment 16d
Queue right now
5
49 received · 23 resolved
Response score
95%
within commitment
Triage: median vs commitment12h / 24h
Bounty: median vs commitment8d / 16d
Escrow
$1,500,000
Held by Peregrine, released automatically on resolution. Covers 16 critical payouts at top of band.
Paid all-time
$980k
Hunters thanked
44
Bounty table
- critical$25k – $90k
- high$8,000 – $25k
- medium$2,000 – $8,000
- low$500 – $2,000
Bands are floors and ceilings the program is held to. Mediation can move a report within a band, never below the floor of its agreed severity.
Scope · 3 assets
signed · diff feed available| Asset | Type | Max severity | Eligible | Note |
|---|---|---|---|---|
| app.tessera.example | web | critical | yes | Online banking |
| api.tessera.example | api | critical | yes | Open banking and internal APIs |
| com.tessera.bank | mobile | critical | yes | iOS and Android |
Out of scope
- Testing against accounts you do not own
- Any transaction over the sandbox limit
Policy
Sandbox accounts are pre-funded. Transfers between two researcher sandbox accounts are the required proof for any money-movement finding.
#open-banking#mobile#psd2
Recent reports · 2
Filter hacktivity →- mediumPGN-10318· undisclosed
Mobile banking PIN retry counter resets on app reinstall
Not disclosed. Private program.
$5,000Triaged - highPGN-10416· undisclosed
Open-banking consent screen approves scopes beyond those displayed
Not disclosed. Private program.
$20,000Resolved
Top hunters here
- 1@saltmarsh$20k1 resolved