Voltgrid
Fleet charging and energy settlement for commercial EV operators.
Held by Peregrine, released automatically on resolution. Covers 9 critical payouts at top of band.
- critical$18k – $60k
- high$6,000 – $18k
- medium$1,500 – $6,000
- low$400 – $1,500
Bands are floors and ceilings the program is held to. Mediation can move a report within a band, never below the floor of its agreed severity.
| Asset | Type | Max severity | Eligible | Note |
|---|---|---|---|---|
| ops.voltgrid.energy | web | critical | yes | Operator console |
| api.voltgrid.energy | api | critical | yes | Settlement and telemetry |
| OCPP gateway | infrastructure | critical | yes | ocpp.voltgrid.energy, researcher simulators only |
| energy.voltgrid.driver | mobile | high | yes | Driver app |
- Testing against physical chargers not provisioned to you
- Firmware extraction from hardware you do not own
Researchers can request a virtual charger fleet. Any finding that changes a settlement amount is High at minimum.
- highPGN-10463
Settlement amount mutated after signature via delimiter-free field concatenation
The HMAC covered concatenated fields with no separator, so a shifted boundary between amount and session id verified under the original signature.
$16,000Resolved - criticalPGN-10399
OCPP simulator can register as an existing charger id and receive its remote-start commands
Boot notifications were trusted by charger id alone within the researcher's provisioned virtual fleet.
$45,000Resolved - mediumPGN-10380
Deep link in driver app leaks session token to arbitrary host via redirect
The in-app browser forwarded the bearer token on cross-origin redirects initiated from a trusted deep link.
$2,800Resolved
- 1@quietcoil$45k1 resolved
- 2@nullwave$16k1 resolved
- 3@mokuren$2,8001 resolved