Bug bounty program
SC
Scopely
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 24
- Disclosed reports
- 0
- Subdomains
- 3,670
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains3,670
| Name | Scope | First seen |
|---|---|---|
| aichat.tophat.scopely.io | In scope | 2026-11-14 |
| alberto.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| btorla.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| dev.builds.tophat.scopely.ioci, dev | In scope | 2026-11-14 |
| develop.builds.tophat.scopely.ioci, dev | In scope | 2026-11-14 |
| cache.unity-accelerator.develop.builds.tophat.scopely.ioci, dev | In scope | 2026-11-14 |
| cache.unity-accelerator.global.developers.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| game-integrity.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| unity-accelerator.production.primary.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| cache.unity-accelerator.production.primary.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| prod.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| rturney.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| sandbox1.builds.tophat.scopely.ioci, test | In scope | 2026-11-14 |
| sandbox2.builds.tophat.scopely.ioci, test | In scope | 2026-11-14 |
| sandbox3.builds.tophat.scopely.ioci, test | In scope | 2026-11-14 |
| sandbox4.builds.tophat.scopely.ioci, test | In scope | 2026-11-14 |
| unity-accelerator.production.secondary.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| cache.unity-accelerator.production.secondary.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| stage.builds.tophat.scopely.ioci, staging | In scope | 2026-11-14 |
| test.builds.tophat.scopely.ioci, test | In scope | 2026-11-14 |
| test2.builds.tophat.scopely.ioci, test | In scope | 2026-11-14 |
| test3.builds.tophat.scopely.ioci, test | In scope | 2026-11-14 |
| turney.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| wakins.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| wwhite.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| zheckman.builds.tophat.scopely.ioci | In scope | 2026-11-14 |
| junktest.tophat.scopely.io | In scope | 2026-11-14 |
| peg-e.tophat.scopely.io | In scope | 2026-11-14 |
| dev.peg-e.tophat.scopely.iodev | In scope | 2026-11-14 |
| quick-env.dev.peg-e.tophat.scopely.iodev | In scope | 2026-11-14 |
| dev.rm.tophat.scopely.iodev | In scope | 2026-11-14 |
| build-development-dashboard.unity-accelerator.tophat.scopely.ioadmin, ci, dev | In scope | 2026-11-14 |
| umbriel.scopely.io | In scope | 2026-11-14 |
| voltron.scopely.io | In scope | 2026-11-14 |
| staging-starbase.voltron.scopely.iostaging | In scope | 2026-11-14 |
| starbase.voltron.scopely.io | In scope | 2026-11-14 |
| whiplash-cs-vpn.scopely.iovpn | In scope | 2026-11-14 |
| whiplash-vpn.scopely.iovpn | In scope | 2026-11-14 |
| withboard.scopely.io | In scope | 2026-11-14 |
| www.withboard.scopely.io | In scope | 2026-11-14 |
| xp.scopely.io | In scope | 2026-11-14 |
| y.scopely.io | In scope | 2026-11-14 |
| locust.y.scopely.io | In scope | 2026-11-14 |
| loft.y.scopely.io | In scope | 2026-11-14 |
| vpn.y.scopely.iovpn | In scope | 2026-11-14 |
| yellowjacket-automation.y.scopely.io | In scope | 2026-11-14 |
| yellowjacket-dev.y.scopely.iodev | In scope | 2026-11-14 |
| admin.withbuddies.comadmin | In scope | 2026-11-14 |
| batch-games-dice-api.withbuddies.comapi | In scope | 2026-11-14 |
| blog.withbuddies.com | In scope | 2026-11-14 |
| client.withbuddies.com | In scope | 2026-11-14 |
| dev-wheeloffortune-api.withbuddies.comapi, dev | In scope | 2026-11-14 |
| dice-api.withbuddies.comapi | In scope | 2026-11-14 |
| preview.dice.withbuddies.comstaging | In scope | 2026-11-14 |
| prod.dice.withbuddies.com | In scope | 2026-11-14 |
| qa.dice.withbuddies.comtest | In scope | 2026-11-14 |
| sandbox1.dice.withbuddies.comtest | In scope | 2026-11-14 |
| stage.dice.withbuddies.comstaging | In scope | 2026-11-14 |
| servicehost.stage.dice.withbuddies.comstaging | In scope | 2026-11-14 |
| email.withbuddies.com | In scope | 2026-11-14 |
| o1.email.withbuddies.com | In scope | 2026-11-14 |
| o2.email.withbuddies.com | In scope | 2026-11-14 |
| o3.email.withbuddies.com | In scope | 2026-11-14 |
| o4.email.withbuddies.com | In scope | 2026-11-14 |
| o5.email.withbuddies.com | In scope | 2026-11-14 |
| facebook-dice.withbuddies.com | In scope | 2026-11-14 |
| fortune.withbuddies.com | In scope | 2026-11-14 |
| dev.fortune.withbuddies.comdev | In scope | 2026-11-14 |
| prod.fortune.withbuddies.com | In scope | 2026-11-14 |
| stage.fortune.withbuddies.comstaging | In scope | 2026-11-14 |
| jenkins.withbuddies.comci | In scope | 2026-11-14 |
| dev.legend.withbuddies.comdev | In scope | 2026-11-14 |
| docs.dev.legend.withbuddies.comdev | In scope | 2026-11-14 |
| qa.legend.withbuddies.comtest | In scope | 2026-11-14 |
| stage.legend.withbuddies.comstaging | In scope | 2026-11-14 |
| logs.withbuddies.commonitoring | In scope | 2026-11-14 |
| mail.withbuddies.commail | In scope | 2026-11-14 |
| odyssey.withbuddies.com | In scope | 2026-11-14 |
| content.odyssey.withbuddies.com | In scope | 2026-11-14 |
| design.odyssey.withbuddies.com | In scope | 2026-11-14 |
| dev.odyssey.withbuddies.comdev | In scope | 2026-11-14 |
| admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| 9-mmcscwizard.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| apiaccount.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| 2019www.blog.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| bocaicelueyizhan.blog.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| cmet-logs.blog.admin.dev.odyssey.withbuddies.comadmin, dev, monitoring | In scope | 2026-11-14 |
| ebs-baijialequnbisheng-k8s-prd.blog.admin.dev.odyssey.withbuddies.comadmin, dev, tools | In scope | 2026-11-14 |
| book.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| ceres-tea.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| 9.community.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| ceres.demo.admin.dev.odyssey.withbuddies.comadmin, dev, test | In scope | 2026-11-14 |
| cool.dqr.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| dag.fr-ca.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| certaccess.honey.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| keywww2.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| auth.autodiscover.m.admin.dev.odyssey.withbuddies.comadmin, auth, dev, mail | In scope | 2026-11-14 |
| payana.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| dc.sts-vis-dev-main.admin.dev.odyssey.withbuddies.comadmin, dev | In scope | 2026-11-14 |
| api.dev.odyssey.withbuddies.comapi, dev | In scope | 2026-11-14 |
3,667 names are covered by the program's own scope; 6 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.