Bug bounty program
SN
Snapchat
Most upvoted reports37
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Exposed Kubernetes API - RCE/Exposed CredsAnalysed#455645 | Command and Code Injection | 2021-07-29 | $25,000 | 1,191 |
| Improper Authentication - any user can login as other user with otp/logout & otp/loginAnalysed#921780 | Authentication | 2021-09-03 | – | 972 |
| Delete anyone's content spotlight remotely.Analysed#1819832 | Insecure Direct Object Reference | 2023-03-06 | $15,000 | 801 |
| Github Token Leaked publicly for https://github.sc-corp.netAnalysed#396467 | Cryptography | 2018-10-08 | – | 582 |
| Publicly accessible Continuous Integration ToolAnalysed#313457 | Access Control | 2021-07-29 | – | 562 |
| Access to multiple production Grafana dashboardsAnalysed#663628 | Information Disclosure | 2020-11-04 | $10,000 | 464 |
| Open prod Jenkins instanceAnalysed#231460 | Information Disclosure | 2017-08-19 | $15,000 | 436 |
| Server-Side Request Forgery using Javascript allows to exfill data from Google MetadataAnalysed#530974 | Server-Side Request Forgery | 2020-11-30 | – | 421 |
| Stealing SSO Login Tokens (snappublisher.snapchat.com)Analysed#265943 | Authentication | 2021-07-29 | $7,500 | 244 |
| Leaked JFrog Artifactory username and password exposed on GitHub - https://snapchat.jfrog.ioAnalysed#911606 | Information Disclosure | 2021-08-12 | $15,000 | 137 |
Subdomains1,681
| Name | Scope | First seen |
|---|---|---|
| chat-gateway112-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway113-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway114-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway115-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway116-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway117-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway118-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway119-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway121-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway123-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway124-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway126-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway127-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway128-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway129-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway130-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway131-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway132-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway133-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway134-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway135-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway136-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway137-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway138-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway139-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway141-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway142-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway143-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway144-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway145-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway146-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway147-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway148-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway149-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway150-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway151-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway152-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway153-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway154-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway155-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway156-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway157-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway158-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway159-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway160-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway161-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway162-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway163-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway164-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway165-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway166-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway167-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway168-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway169-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway170-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway171-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway172-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway173-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway174-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway175-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway176-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway177-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway178-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway179-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway180-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway181-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway182-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway183-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway184-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway185-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway186-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway187-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway188-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway189-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway190-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway191-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway192-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway193-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway194-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway195-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway196-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway197-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway198-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway199-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway210-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway211-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway213-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway214-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway215-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway216-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway217-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway218-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway230-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway231-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway232-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway233-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway234-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway235-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway236-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway237-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
17 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.