Tools for Humanity
HackerOne live webgit_repocontractBug bounty program on HackerOne. Official listing: https://hackerone.com/toolsforhumanity. Scope and rules are controlled by the program — always verify against the official listing before testing.
Max bounty
$25K
Starts
2023-06-08
In-scope assets
17
Last updated
2026-06-16
In-scope assets
| Type | Asset | Detail |
|---|---|---|
| repo | worldcoin/orb-core | **Primary Asset** |
| repo | worldcoin/orb-firmware | **Primary Asset** |
| repo | worldcoin/orb-messages | **Secondary Asset** |
| repo | worldcoin/orb-relay-messages | **Secondary Asset** |
| repo | worldcoin/orb-rustzone | **Primary Asset** |
| repo | worldcoin/orb-secure-element | **Primary Asset** |
| repo | worldcoin/orb-software | **Primary Asset** |
| web | *.consumer.worldcoin.org | |
| web | *.toolsforhumanity.com | |
| web | *.worldcoin-distributors.com | |
| web | *.worldcoin.dev | |
| web | *.worldcoin.org | |
| web | developer.worldcoin.org | |
| web | toolsforhumanity.com | |
| web | world.org | |
| web | worldcoin.org | |
| web | https://docs.world.org/world-chain/reference/address-book |
Watching Tools for Humanity? BountyHunt monitors every in-scope repo and tells you the moment a commit, release, or scope change lands — in the app, by webhook, or straight to your agent over MCP.
Track this program