Bumble: Rating & Reviews

NR Unrated

Bumble

Bumble HackerOne

3 more reviews needed for a grade

Write a review

Program page hackerone.com ↗

Claim this company profile

Work at Bumble? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.

Ask BugRater to submit it

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.

Program metrics HackerOne · published

HackerOne’s own figures for this program, read from its public page, not reported by researchers and not part of the BugRater grade. Captured 22 Sep 2026.

What it pays, by severity

Critical amount not published 15 reports

High $1,250 avg 41 reports firm

Medium $483 avg 88 reports firm

Low $174 avg 108 reports firm

$145,483 paid to researchers in total, $6,620 of it in the last 90 days. Lifetime figure as HackerOne prints it: evidence this program has paid, not a promise about any one report.

Intake & responsiveness · last 90 days

Reports received

140

in 90 days

Resolved

365

all time, last one 14 days ago

Participants

306

hunters engaged

Response efficiency

80%

meeting its targets, HackerOne’s figure

SLA misses

targets missed

Reports received · day by day, last 15 days 132–146

25 Aug 140 reports 22 Sep

Response targets it sets itself

First response

1 day

Triage

2 days

Bounty

30 days

Resolution

30 days

A target the program declared, not a measurement of it being met.

Getting in the door

Open to submit. Nothing HackerOne publishes stands between a hunter and a first report here.

Over 31 days (17 snapshots): intake up 5 reports; response efficiency up 4 points; 90-day payout up $300.

See how this programme’s report load compares to others →

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

311 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

#	Researcher	Reputation	Recognised / submitted
1	jarvis0x1	489	23 / 34 68%
1	ba4fe4ca95021d367f8a574	22	1 / 1 100%
2	mk7120	478	17 / 23 74%
3	hudmi	326	8 / 10 80%
3	b42f97eb69dddcafe5cc278	276	8 / 9 89%
4	w2w	223	5 / 9 56%
5	0x3c3e	190	5 / 5 100%
6	m0chan	152	7 / 8 88%
7	pitspile	149	7 / 10 70%
8	bhavukjain1	145	5 / 5 100%
9	tomtenisse	136	3 / 4 75%
10	l0c4t10nh4ck3r	121	3 / 5 60%
11	exploit0tango	120	5 / 8 63%
12	dejavuln	113	4 / 4 100%
13	th4nu_0x0	110	5 / 11 45%
14	sameerphad72	100	5 / 7 71%
15	bagipro	88	4 / 8 50%
15	nikitchenko	88	4 / 8 50%
15	zzeushacker	0	0 / 1 0%
17	imnotyouaa_test	84	2 / 2 100%
18	varotariadarshit	79	2 / 3 67%
18	zombiehelp54	79	2 / 2 100%
20	jensec	76	3 / 3 100%
21	iamavinasht	73	4 / 7 57%
21	madrobot	73	7 / 8 88%

Showing the top 25 of 311 credited on HackerOne.

Program profile HackerOne · imported

Facts published by HackerOne on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 16 Sep 2026.

Bumble - Date, Meet, Network Better

Responsiveness

80% HackerOne’s figure

Swag

Currency

USD

Submissions

Open

Launched

Jun 2017

Scope entries

75 HackerOne’s count

Scope

71 assets

Asset	Type	Eligibility	Max severity
1604650263	APPLE STORE APP ID	✓ bounty	Critical
351331194	APPLE STORE APP ID	✓ bounty	Critical
403684733	APPLE STORE APP ID	✓ bounty	Critical
6444040977	APPLE STORE APP ID	✓ bounty	Critical
930441707	APPLE STORE APP ID	✓ bounty	Critical

Show all 71 assets

Asset	Type	Eligibility	Max severity
api.geneva-staging.com	URL	✓ bounty	Critical
app.geneva-staging.chat	URL	✓ bounty	Critical
app.geneva-staging.com	URL	✓ bounty	Critical
badoo.com	URL	✓ bounty	Critical
badoocdn.com	URL	✓ bounty	Critical
blendr.com	URL	✓ bounty	Critical
bma.badoo.com	URL	✓ bounty	Critical
bma.bumble.com	URL	✓ bounty	Critical
ccardseu1.badoo.com	URL	✓ bounty	Critical
ccardsus1.badoo.com	URL	✓ bounty	Critical
chatdate.app	URL	✓ bounty	Critical
com.badoo.hotornot	APPLE STORE APP ID	✓ bounty	Critical
com.badoo.mobile	GOOGLE PLAY APP ID	✓ bounty	Critical
com.badoo.twa	GOOGLE PLAY APP ID	✓ bounty	Critical
com.blendr.Blendriphone	APPLE STORE APP ID	✓ bounty	Critical
com.blendr.mobile	URL	✓ bounty	Critical
com.bumble.app	GOOGLE PLAY APP ID	✓ bounty	Critical
com.bumblebff.app	GOOGLE PLAY APP ID	✓ bounty	Critical
com.flashgap.fruits	APPLE STORE APP ID	✓ bounty	Critical
com.flashgap.fruitz	GOOGLE PLAY APP ID	✓ bounty	Critical
com.genevachat.staging	OTHER APK	✓ bounty	Critical
com.hotornot.app	GOOGLE PLAY APP ID	✓ bounty	Critical
com.official.rnapp	GOOGLE PLAY APP ID	✓ bounty	Critical
corp.badoo.com	URL	✓ bounty	Critical
deeplinks.geneva-staging.chat	URL	✓ bounty	Critical
deeplinks.geneva-staging.com	URL	✓ bounty	Critical
eu1.badoo.com	URL	✓ bounty	Critical
gateway.geneva-staging.chat	URL	✓ bounty	Critical
gateway.geneva-staging.com	URL	✓ bounty	Critical
Geneva	OTHER	✓ bounty	Critical
geneva-staging.chat	URL	✓ bounty	Critical
getofficial.co	URL	✓ bounty	Critical
go.geneva-staging.com	URL	✓ bounty	Critical
hotornot.com	URL	✓ bounty	Critical
https://appdistribution.firebase.google.com/pub/i/505927432f64f04a	OTHER APK	✓ bounty	Critical
https://testflight.apple.com/join/Y4cHu289	TESTFLIGHT	✓ bounty	Critical
links.geneva-staging.chat	URL	✓ bounty	Critical
links.geneva-staging.com	URL	✓ bounty	Critical
m.badoo.com	URL	✓ bounty	Critical
meu1.badoo.com	URL	✓ bounty	Critical
mus1.badoo.com	URL	✓ bounty	Critical
payments.geneva-staging.chat	URL	✓ bounty	Critical
payments.geneva-staging.com	URL	✓ bounty	Critical
presence.geneva-staging.chat	URL	✓ bounty	Critical
presence.geneva-staging.com	URL	✓ bounty	Critical
router.geneva-staging.com	URL	✓ bounty	Critical
social.geneva-staging.chat	URL	✓ bounty	Critical
social.geneva-staging.com	URL	✓ bounty	Critical
sockets.geneva-staging.chat	URL	✓ bounty	Critical
sockets.geneva-staging.com	URL	✓ bounty	Critical
translate.badoo.com	URL	✓ bounty	Critical
us1.badoo.com	URL	✓ bounty	Critical
web.geneva-staging.com	URL	✓ bounty	Critical
www.bumble.com	URL	✓ bounty	Critical
www.geneva-staging.chat	URL	✓ bounty	Critical
www.geneva-staging.com	URL	✓ bounty	Critical
1660741163	APPLE STORE APP ID	out	None
blog.bumble.com	URL	out	None
brand.bumble.com	URL	out	None
com.sgiggle.Mango	GOOGLE PLAY APP ID	out	None
com.studio.projects.zodia	GOOGLE PLAY APP ID	out	None
heyfiesta.com	URL	out	None
honey.bumble.com	URL	out	None
shop.bumble.com	URL	out	None
thebeehive.bumble.com	URL	out	None
zodia.studio	URL	out	None

HackerOne lists 75 scope entries; its public listing groups many assets under one label, so identical entries are shown once.