PayPal
HackerOne live webBug bounty program on HackerOne. Official listing: https://hackerone.com/paypal. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$30K
Starts
2018-08-20
In-scope assets
30
Last updated
2026-09-03
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| web | *.braintree-api.com | |
| web | *.braintree.tools | |
| web | *.braintreegateway.com | |
| web | *.braintreepayments.com | |
| web | *.hyperwallet.com | |
| web | *.paydiant.com | |
| web | *.paylution.com | |
| web | *.paypal.com | |
| web | *.paypalcorp.com | |
| web | *.venmo.com | |
| web | *.xoom.com | |
| web | api.loanbuilder.com | |
| web | api.swiftfinancial.com | |
| web | decision.swiftfinancial.com | |
| web | loanbuilder.com | |
| web | my.loanbuilder.com | |
| web | my.swiftfinancial.com | |
| web | partner.swiftfinancial.com | |
| web | paypal.me | |
| web | paypalobjects.com | |
| web | pigeon.swiftfinancial.com | |
| web | prequal.swiftfinancial.com | |
| web | py.pl | |
| web | sandbox.braintreegateway.com | |
| web | scrutiny.swiftfinancial.com | |
| web | swiftcapital.com | |
| web | swiftfinancial.com | |
| web | www.loanbuilder.com | |
| web | www.swiftcapital.com | |
| web | www.swiftfinancial.com |
Watching PayPal? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program