Bug bounty program
Scopely
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 24
- Disclosed reports
- 0
- Subdomains
- 3,670
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains3,670
| Name | Scope | First seen |
|---|---|---|
| dice-api.withbuddies.comapi | In scope | 2026-11-14 |
| preview-api.withbuddies.comapi, staging | In scope | 2026-11-14 |
| staging-api.withbuddies.comapi, staging | In scope | 2026-11-14 |
| scrabble-api.withbuddies.comapi | In scope | 2026-11-14 |
| stage-dice-api.withbuddies.comapi, staging | In scope | 2026-11-14 |
| api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| api.prod.tophat.withbuddies.comapi | In scope | 2026-11-14 |
| preview-dice-api.withbuddies.comapi, staging | In scope | 2026-11-14 |
| api.preview.wheel.withbuddies.comapi, staging | In scope | 2026-11-14 |
| api-iris.dev.panda.withbuddies.comapi, dev | In scope | 2026-11-14 |
| stage-scrabble-api.withbuddies.comapi, staging | In scope | 2026-11-14 |
| wheeloffortune-api.withbuddies.comapi | In scope | 2026-11-14 |
| api-iris.prod.panda.withbuddies.comapi | In scope | 2026-11-14 |
| api.sandbox1.tophat.withbuddies.comapi, test | In scope | 2026-11-14 |
| api.dev.vault.tophat.withbuddies.comapi, dev, tools | In scope | 2026-11-14 |
| batch-games-dice-api.withbuddies.comapi | In scope | 2026-11-14 |
| dev.api.vault.tophat.withbuddies.comapi, dev, tools | In scope | 2026-11-14 |
| preview-scrabble-api.withbuddies.comapi, staging | In scope | 2026-11-14 |
| api.test.vault.tophat.withbuddies.comapi, test, tools | In scope | 2026-11-14 |
| preview-dice-api-test.withbuddies.comapi, staging, test | In scope | 2026-11-14 |
| api.stage.vault.tophat.withbuddies.comapi, staging, tools | In scope | 2026-11-14 |
| dev-wheeloffortune-api.withbuddies.comapi, dev | In scope | 2026-11-14 |
| wood19.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| 3.reset.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| api.production.scrabble.withbuddies.comapi | In scope | 2026-11-14 |
| bomgar1.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| api.prod-arcade.pantheon.withbuddies.comapi | In scope | 2026-11-14 |
| sinairyu.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| clientgit.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| preview-wheeloffortune-api.withbuddies.comapi, staging | In scope | 2026-11-14 |
| asanka.2015.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| config.2015.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| docker-alpha.api.dev.odyssey.withbuddies.comapi, dev, staging, tools | In scope | 2026-11-14 |
| api-content-sandbox.dev.panda.withbuddies.comapi, dev, test | In scope | 2026-11-14 |
| staging-tableau.api.dev.odyssey.withbuddies.comapi, dev, staging | In scope | 2026-11-14 |
| apps-rnd-mirrors.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| admin.engineering.api.dev.odyssey.withbuddies.comadmin, api, dev | In scope | 2026-11-14 |
| assetshost.productions.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| namibia.yahtzee-with-buddies.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
| nextour.yahtzee-with-buddies.api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
3,667 names are covered by the program's own scope; 6 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.