Bug bounty program
SN
Snapchat
Most upvoted reports37
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Exposed Kubernetes API - RCE/Exposed CredsAnalysed#455645 | Command and Code Injection | 2021-07-29 | $25,000 | 1,191 |
| Improper Authentication - any user can login as other user with otp/logout & otp/loginAnalysed#921780 | Authentication | 2021-09-03 | – | 972 |
| Delete anyone's content spotlight remotely.Analysed#1819832 | Insecure Direct Object Reference | 2023-03-06 | $15,000 | 801 |
| Github Token Leaked publicly for https://github.sc-corp.netAnalysed#396467 | Cryptography | 2018-10-08 | – | 582 |
| Publicly accessible Continuous Integration ToolAnalysed#313457 | Access Control | 2021-07-29 | – | 562 |
| Access to multiple production Grafana dashboardsAnalysed#663628 | Information Disclosure | 2020-11-04 | $10,000 | 464 |
| Open prod Jenkins instanceAnalysed#231460 | Information Disclosure | 2017-08-19 | $15,000 | 436 |
| Server-Side Request Forgery using Javascript allows to exfill data from Google MetadataAnalysed#530974 | Server-Side Request Forgery | 2020-11-30 | – | 421 |
| Stealing SSO Login Tokens (snappublisher.snapchat.com)Analysed#265943 | Authentication | 2021-07-29 | $7,500 | 244 |
| Leaked JFrog Artifactory username and password exposed on GitHub - https://snapchat.jfrog.ioAnalysed#911606 | Information Disclosure | 2021-08-12 | $15,000 | 137 |
Subdomains1,681
| Name | Scope | First seen |
|---|---|---|
| chat-gateway006-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway007-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway008-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway009-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway010-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway011-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway012-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway013-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway014-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway015-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway016-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway017-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway018-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway019-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway021-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway023-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway024-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway026-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway027-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway028-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway029-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway030-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway031-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway032-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway033-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway034-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway035-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway036-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway037-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway038-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway039-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway041-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway042-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway043-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway044-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway045-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway046-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway047-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway048-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway049-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway050-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway051-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway052-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway053-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway054-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway056-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway057-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway058-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway059-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway060-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway061-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway062-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway063-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway064-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway065-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway066-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway067-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway068-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway069-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway070-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway071-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway072-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway073-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway074-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway075-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway076-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway077-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway078-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway080-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway081-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway082-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway083-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway084-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway085-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway086-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway087-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway088-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway089-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway090-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway091-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway092-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway093-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway094-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway095-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway096-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway097-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway098-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway099-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway100-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway101-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway102-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway103-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway104-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway105-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway106-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway107-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway108-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway109-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway110-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway111-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
17 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.