Bug bounty program
SN
Snapchat
Most upvoted reports37
All reports| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Exposed Kubernetes API - RCE/Exposed CredsAnalysed#455645 | Command and Code Injection | 2021-07-29 | $25,000 | 1,191 |
| Improper Authentication - any user can login as other user with otp/logout & otp/loginAnalysed#921780 | Authentication | 2021-09-03 | – | 972 |
| Delete anyone's content spotlight remotely.Analysed#1819832 | Insecure Direct Object Reference | 2023-03-06 | $15,000 | 801 |
| Github Token Leaked publicly for https://github.sc-corp.netAnalysed#396467 | Cryptography | 2018-10-08 | – | 582 |
| Publicly accessible Continuous Integration ToolAnalysed#313457 | Access Control | 2021-07-29 | – | 562 |
| Access to multiple production Grafana dashboardsAnalysed#663628 | Information Disclosure | 2020-11-04 | $10,000 | 464 |
| Open prod Jenkins instanceAnalysed#231460 | Information Disclosure | 2017-08-19 | $15,000 | 436 |
| Server-Side Request Forgery using Javascript allows to exfill data from Google MetadataAnalysed#530974 | Server-Side Request Forgery | 2020-11-30 | – | 421 |
| Stealing SSO Login Tokens (snappublisher.snapchat.com)Analysed#265943 | Authentication | 2021-07-29 | $7,500 | 244 |
| Leaked JFrog Artifactory username and password exposed on GitHub - https://snapchat.jfrog.ioAnalysed#911606 | Information Disclosure | 2021-08-12 | $15,000 | 137 |
Subdomains1,681
| Name | Scope | First seen |
|---|---|---|
| chat-gateway238-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway239-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway241-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway242-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway243-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway244-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway245-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway246-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway247-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway248-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway249-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway260-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway261-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway262-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway263-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway264-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway265-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway266-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway267-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway268-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway269-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway270-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway271-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway272-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway273-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway274-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway275-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway276-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway277-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway278-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway279-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway280-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway281-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway282-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway283-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway284-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway285-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway286-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway287-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway288-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway289-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway290-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway291-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway292-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway293-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway294-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway295-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway296-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway297-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway298-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway299-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway300-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway301-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway303-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway311-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway313-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway314-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway316-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway318-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway319-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway324-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway326-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway329-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway330-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway332-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway337-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway338-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway339-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway341-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway342-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway343-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway344-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway346-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway349-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway350-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway351-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway352-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway355-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway357-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway358-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway360-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway361-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway362-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway363-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway367-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway368-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway369-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway372-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway374-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway380-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway381-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway382-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway383-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway387-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway390-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway391-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway392-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway393-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway394-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
| chat-gateway395-prod.chat.snapchat.com | Not in the scope | 2026-11-14 |
17 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.