BugRater
Early access: the directory is still filling out, and every rating here is a reported experience.
Programs / Oppo
NR Unrated
OPPO
Oppo HackerOne
3 more reviews needed for a grade
Write a review
Program page hackerone.com ↗
Claim this company profile

Work at Oppo? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.

Ask BugRater to submit it

Private. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.

Program metrics HackerOne · published

HackerOne’s own figures for this program, read from its public page, not reported by researchers and not part of the BugRater grade. Captured 24 Sep 2026.

What it pays, by severity

Critical amount not published 2 reports
High amount not published 26 reports
Medium amount not published 69 reports
Low $10 avg 76 reports firm

$39,711 paid to researchers in total, $10 of it in the last 90 days. Lifetime figure as HackerOne prints it: evidence this program has paid, not a promise about any one report.

Intake & responsiveness · last 90 days

Reports received
250
in 90 days
Resolved
173
all time, last one 6 days ago
Participants
196
hunters engaged
Response efficiency
88%
meeting its targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received · day by day, last 15 days 245–276
27 Aug 250 reports 24 Sep

Response targets it sets itself

First response
1 day
Triage
7 days
Bounty
30 days
Resolution
30 days

A target the program declared, not a measurement of it being met.

Getting in the door

Open to submit. Nothing HackerOne publishes stands between a hunter and a first report here.

Over 33 days (18 snapshots): intake down 100 reports; response efficiency down 7 points; 90-day payout down $2,135.

See how this programme’s report load compares to others →

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

198 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

# Researcher Reputation Recognised / submitted
1 sabr0x 453 9 / 12 75%
2 shiyier 400 4 / 8 50%
3 amsda 262 7 / 13 54%
4 arthuraires 218 4 / 13 31%
5 lauritz 133 4 / 8 50%
6 omkumar13 123 4 / 10 40%
7 tomisec 115 5 / 8 63%
8 m1k0er 108 4 / 4 100%
9 asimreza 89 3 / 5 60%
10 sambool 81 4 / 22 18%
11 malcolmx 79 2 / 4 50%
12 tushar6378 76 2 / 4 50%
13 poorduck 66 2 / 5 40%
13 prakash142 66 3 / 4 75%
13 strayhunt 66 3 / 7 43%
13 yash_005 66 0 / 0
13 zeeagil 66 3 / 12 25%
18 0x4xm 64 2 / 4 50%
19 0xmanticore 57 2 / 3 67%
19 bugbunnyresearch 57 1 / 3 33%
19 confusion_capy8424 57 1 / 1 100%
19 dopelife 57 1 / 4 25%
19 jkpz86 57 1 / 1 100%
19 manivannan2016 57 1 / 2 50%
19 ri2q 57 1 / 7 14%

Showing the top 25 of 198 credited on HackerOne.

Program profile HackerOne · imported

Facts published by HackerOne on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 23 Sep 2026.

We would like to promote consumer understanding of OPPO product and business-related security privacy features.

Responsiveness
88% HackerOne’s figure
Swag
Offered
Currency
USD
Submissions
Open
Launched
Feb 2025
Scope entries
206 HackerOne’s count

Scope

202 assets
AssetTypeEligibilityMax severity
*.coloros.com WILDCARD ✓ bounty Critical
*.myoas.com WILDCARD ✓ bounty Critical
*.myoas.net WILDCARD ✓ bounty Critical
*.myoppo.com WILDCARD ✓ bounty Critical
*.nearme.com.cn WILDCARD ✓ bounty Critical
Show all 202 assets
AssetTypeEligibilityMax severity
*.oppo.com WILDCARD ✓ bounty Critical
*.oppomobile.com WILDCARD ✓ bounty Critical
*.wanyol.com WILDCARD ✓ bounty Critical
*www.domainname.com WILDCARD ✓ bounty Critical
A16k HARDWARE ✓ bounty Critical
A76 HARDWARE ✓ bounty Critical
A96 HARDWARE ✓ bounty Critical
ColorOS OTHER ✓ bounty Critical
com.coloros.assistantscreen OTHER APK ✓ bounty Critical
com.coloros.browser GOOGLE PLAY APP ID ✓ bounty Critical
com.coloros.encryption GOOGLE PLAY APP ID ✓ bounty Critical
com.coloros.findmyphone OTHER APK ✓ bounty Critical
com.coloros.pictorial OTHER APK ✓ bounty Critical
com.coloros.securepay GOOGLE PLAY APP ID ✓ bounty Critical
com.coloros.speechassist GOOGLE PLAY APP ID ✓ bounty Critical
com.coloros.video OTHER APK ✓ bounty Critical
com.coloros.wallet OTHER APK ✓ bounty Critical
com.finshell.fin OTHER APK ✓ bounty Critical
com.finshell.finance OTHER APK ✓ bounty Critical
com.finshell.wallet OTHER APK ✓ bounty Critical
com.fintech.life GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.book OTHER APK ✓ bounty Critical
com.heytap.browser GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.cloud GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.databaseengine OTHER APK ✓ bounty Critical
com.heytap.health.international GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.health.quickapp OTHER APK ✓ bounty Critical
com.heytap.heymelody OTHER APK ✓ bounty Critical
com.heytap.mall GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.market GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.miniapp.sports OTHER APK ✓ bounty Critical
com.heytap.music OTHER APK ✓ bounty Critical
com.heytap.ocsp.client OTHER APK ✓ bounty Critical
com.heytap.pictorial OTHER APK ✓ bounty Critical
com.heytap.reader OTHER APK ✓ bounty Critical
com.heytap.research OTHER APK ✓ bounty Critical
com.heytap.store GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.tas OTHER APK ✓ bounty Critical
com.heytap.themestore GOOGLE PLAY APP ID ✓ bounty Critical
com.heytap.wallet OTHER APK ✓ bounty Critical
com.heytap.wearable.breeno OTHER APK ✓ bounty Critical
com.heytap.wearable.browser OTHER APK ✓ bounty Critical
com.heytap.wearable.elves OTHER APK ✓ bounty Critical
com.heytap.wearable.healthassessment OTHER APK ✓ bounty Critical
com.heytap.wearable.market OTHER APK ✓ bounty Critical
com.heytap.wearable.research OTHER APK ✓ bounty Critical
com.heytap.wearable.themestore OTHER APK ✓ bounty Critical
com.heytap.xgame GOOGLE PLAY APP ID ✓ bounty Critical
com.katanlabs.bubblepop OTHER APK ✓ bounty Critical
com.katanlabs.matchballgame OTHER APK ✓ bounty Critical
com.katanlabs.worm.ioeatemall WINDOWS APP STORE APP ID ✓ bounty Critical
com.nearme.browser GOOGLE PLAY APP ID ✓ bounty Critical
com.nearme.gamecenter OTHER APK ✓ bounty Critical
com.nearme.themespace GOOGLE PLAY APP ID ✓ bounty Critical
com.nearme.themestore GOOGLE PLAY APP ID ✓ bounty Critical
com.netease.my.nearme.gamecenter OTHER APK ✓ bounty Critical
com.oplus.accesscard OTHER APK ✓ bounty Critical
com.oplus.account GOOGLE PLAY APP ID ✓ bounty Critical
com.oplus.aimemory OTHER APK ✓ bounty Critical
com.oplus.games OTHER APK ✓ bounty Critical
com.oplus.melody OTHER APK ✓ bounty Critical
com.oplus.member GOOGLE PLAY APP ID ✓ bounty Critical
com.oplus.play OTHER APK ✓ bounty Critical
com.oplus.studycenter OTHER APK ✓ bounty Critical
com.oplus.themestore GOOGLE PLAY APP ID ✓ bounty Critical
com.oplus.vip GOOGLE PLAY APP ID ✓ bounty Critical
com.opos.ads GOOGLE PLAY APP ID ✓ bounty Critical
com.oppo.cloud GOOGLE PLAY APP ID ✓ bounty Critical
com.oppo.encryption GOOGLE PLAY APP ID ✓ bounty Critical
com.oppo.market GOOGLE PLAY APP ID ✓ bounty Critical
com.oppo.quicksearchbox GOOGLE PLAY APP ID ✓ bounty Critical
com.oppo.speechassist GOOGLE PLAY APP ID ✓ bounty Critical
com.oppo.store GOOGLE PLAY APP ID ✓ bounty Critical
com.oppo.usercenter GOOGLE PLAY APP ID ✓ bounty Critical
com.qpon.merchant OTHER APK ✓ bounty Critical
com.qpon.platform OTHER APK ✓ bounty Critical
com.realme.storecn OTHER APK ✓ bounty Critical
com.realmestore.app OTHER APK ✓ bounty Critical
com.shopai.apps OTHER APK ✓ bounty Critical
community.coloros.com URL ✓ bounty Critical
Core Web Properties OTHER ✓ bounty Critical
Extremely high properties OTHER ✓ bounty Critical
F 21 Pro HARDWARE ✓ bounty Critical
FindN2 HARDWARE ✓ bounty Critical
FindN2Flip HARDWARE ✓ bounty Critical
FindN3 HARDWARE ✓ bounty Critical
FindN3Flip HARDWARE ✓ bounty Critical
FindX6 HARDWARE ✓ bounty Critical
FindX6Pro HARDWARE ✓ bounty Critical
FindX7 HARDWARE ✓ bounty Critical
FindX7Ultra HARDWARE ✓ bounty Critical
finzfin.com URL ✓ bounty Critical
finzjr.com URL ✓ bounty Critical
High Level Properties OTHER ✓ bounty Critical
http://coloros.com URL ✓ bounty Critical
http://engine.heytap.com URL ✓ bounty Critical
http://heytap.com URL ✓ bounty Critical
http://heytapmobi.com URL ✓ bounty Critical
http://nearme.com URL ✓ bounty Critical
http://open.oppomobile.com URL ✓ bounty Critical
http://oppofind.com URL ✓ bounty Critical
https://c.realme.com/eg/ URL ✓ bounty Critical
https://c.realme.com/global/ URL ✓ bounty Critical
https://c.realme.com/id/ URL ✓ bounty Critical
https://c.realme.com/in/ URL ✓ bounty Critical
https://c.realme.com/ru/ URL ✓ bounty Critical
https://career.oppo.com/ URL ✓ bounty Critical
https://chat.oppo.com/ URL ✓ bounty Critical
https://cloud.heytap.com/ URL ✓ bounty Critical
https://cloud.oppo.com/ URL ✓ bounty Critical
https://community.oppo.com/ URL ✓ bounty Critical
https://communityin.oppo.com/ URL ✓ bounty Critical
https://developers.oppomobile.com URL ✓ bounty Critical
https://developers.oppomobile.com/ URL ✓ bounty Critical
https://drp.myoppo.com/ URL ✓ bounty Critical
https://e-global.heytap.com/marketing/login URL ✓ bounty Critical
https://e.heytap.com/ URL ✓ bounty Critical
https://e.oppo.com URL ✓ bounty Critical
https://e.oppo.com/ URL ✓ bounty Critical
https://e.oppomobile.com URL ✓ bounty Critical
https://find.yun.oppo.com/ URL ✓ bounty Critical
https://gcsm.oppoit.com/ URL ✓ bounty Critical
https://hd.opposhop.cn URL ✓ bounty Critical
https://ifind.heytapmobi.com URL ✓ bounty Critical
https://ifind.oppomobile.com URL ✓ bounty Critical
https://mtp.myoas.com URL ✓ bounty Critical
https://nativepay.keke.cn URL ✓ bounty Critical
https://open.oppomobile.com URL ✓ bounty Critical
https://safe.heytap.com/ URL ✓ bounty Critical
https://sbox.myoas.com URL ✓ bounty Critical
https://spgw-pay.finzfin.com URL ✓ bounty Critical
https://support.oppo.com/cn/ URL ✓ bounty Critical
https://u.oppomobile.com/ URL ✓ bounty Critical
https://www.coloros.com/ URL ✓ bounty Critical
https://www.oppo.com/id/store URL ✓ bounty Critical
https://www.oppo.com/id/store/ URL ✓ bounty Critical
https://www.oppo.com/in/ URL ✓ bounty Critical
https://www.oppo.com/in/store URL ✓ bounty Critical
https://www.oppo.com/my/store URL ✓ bounty Critical
https://www.oppo.com/th URL ✓ bounty Critical
https://www.oppo.com/th/store URL ✓ bounty Critical
https://www.opposhop.cn/ URL ✓ bounty Critical
https://www.opposhop.cn/m/ URL ✓ bounty Critical
https://zhongbao-ear.heytap.com/ URL ✓ bounty Critical
https://zhongbao.heytap.com/ URL ✓ bounty Critical
id.heytap.com URL ✓ bounty Critical
id.oppo.com URL ✓ bounty Critical
K10 HARDWARE ✓ bounty Critical
K105G HARDWARE ✓ bounty Critical
K9 HARDWARE ✓ bounty Critical
K9Pro HARDWARE ✓ bounty Critical
K9s HARDWARE ✓ bounty Critical
LockScreenMagazine OTHER ✓ bounty Critical
Low Level Properties and Test environment OTHER ✓ bounty Critical
Mobile Properties OTHER ✓ bounty Critical
Moderate Level Properties OTHER ✓ bounty Critical
myoppo.com URL ✓ bounty Critical
NARZO 80 Lite 4G HARDWARE ✓ bounty Critical
Narzo 80 lite 5G HARDWARE ✓ bounty Critical
NARZO 80 Pro 5G HARDWARE ✓ bounty Critical
NARZO 80x 5G HARDWARE ✓ bounty Critical
nearme.com.cn URL ✓ bounty Critical
Non-Core Web Properties OTHER ✓ bounty Critical
open.oppomobile.com URL ✓ bounty Critical
oppo.com URL ✓ bounty Critical
OPPO+ OTHER ✓ bounty Critical
oppomoble.com URL ✓ bounty Critical
opposhop.cn URL ✓ bounty Critical
Porsche-B HARDWARE ✓ bounty Critical
QuickApps OTHER ✓ bounty Critical
realme 15 5G HARDWARE ✓ bounty Critical
realme 15 Pro 5G HARDWARE ✓ bounty Critical
realme 15T HARDWARE ✓ bounty Critical
realme C71 HARDWARE ✓ bounty Critical
realme C75 5G HARDWARE ✓ bounty Critical
realme GT6 HARDWARE ✓ bounty Critical
realme GT6T HARDWARE ✓ bounty Critical
realme GT7 HARDWARE ✓ bounty Critical
realme GT7Pro HARDWARE ✓ bounty Critical
realme GT7T HARDWARE ✓ bounty Critical
realme Note 70 HARDWARE ✓ bounty Critical
realme P1 speed HARDWARE ✓ bounty Critical
realme P3 Lite 5G HARDWARE ✓ bounty Critical
realme P4 5G HARDWARE ✓ bounty Critical
realme P4 Pro 5G HARDWARE ✓ bounty Critical
Reno 9 5G HARDWARE ✓ bounty Critical
Reno105G HARDWARE ✓ bounty Critical
Reno10Pro+5G HARDWARE ✓ bounty Critical
Reno10Pro5G HARDWARE ✓ bounty Critical
Reno115G HARDWARE ✓ bounty Critical
Reno11Pro5G HARDWARE ✓ bounty Critical
Reno12 HARDWARE ✓ bounty Critical
Reno12Pro HARDWARE ✓ bounty Critical
Reno8Pro5G HARDWARE ✓ bounty Critical
Reno9Pro+5G HARDWARE ✓ bounty Critical
Reno9Pro5G HARDWARE ✓ bounty Critical
com.fullmetalgamedev.fruitshooting OTHER APK out None

HackerOne lists 206 scope entries; its public listing groups many assets under one label, so identical entries are shown once.