BugRater
Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.
Programs / Robinhood Markets Bounty

In brief. Robinhood Markets Bounty is a bug bounty program on HackerOne. Its critical reports have paid an average of $11,313 across 9 reports (HackerOne figures, November 8, 2026). It received 188 reports in the 90 days to November 8, 2026, about 6.1 per in-scope asset. As of Nov 8, 2026. Markdown for agents

NR Unrated

Robinhood Markets Bounty

Robinhood Markets Bounty HackerOne
3 more reviews needed for a grade
Write a review
Program page hackerone.com ↗
Claim this company profile

Work at Robinhood Markets Bounty? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Program metrics HackerOne, published

These are HackerOne’s own figures for this program, taken from its public page. Researchers did not report them, and they don't count toward the BugRater grade. Captured 8 Nov 2026.

What it pays, by severity

Critical $11,313 avg 9 reports indicative
High $4,750 avg 17 reports indicative
Medium $986 avg 36 reports firm
Low amount not published 24 reports

$480,000 paid to researchers in total, $100,000 of it in the last 90 days. This is HackerOne’s lifetime figure. It shows the program has paid out before. It doesn't tell you what any one report will get.

Intake & responsiveness, last 90 days

Reports received
188
in 90 days
Resolved
150
all time, last one 4 days ago
Participants
96
hunters engaged
Response efficiency
69%
below its own targets, HackerOne’s figure
SLA misses
0
targets missed
Reports received, day by day, last 30 days 172–219
9 Oct 188 reports 8 Nov

Response targets it sets itself

First response
1 day
Triage
10 days
Bounty
10 days
Resolution
30 days

These are targets the program set. They don't show whether it meets them.

Barriers to submitting

bounty amounts hidden

Over 78 days (54 snapshots): intake down 23 reports; response efficiency down 21 points; 90-day payout up $15,000.

See how this program’s report load compares to others

Reviews

0 published

No reviews yet.

Be the first to review

Who this program credits

95 credited

Researchers HackerOne shows on this program’s public thanks list, best position first. “Recognised” is how many of a hunter’s submissions the program accepted; the ratio is their signal here, not our judgement of them.

# Researcher Reputation Recognised / submitted
1 ashwarya 3,792 58 / 125 46%
2 zlz 234 3 / 4 75%
3 b0fill3 232 1 / 1 100%
4 m0chan 152 6 / 13 46%
5 nodhive 132 0 / 0
5 ian 120 0 / 0
6 nikts 111 1 / 2 50%
7 stealthy 110 4 / 6 67%
8 ariverapoblet 96 0 / 0
9 meals 83 1 / 1 100%
10 erbbysam 66 0 / 1 0%
11 lucasm0nt3s 64 1 / 3 33%
12 idkruan 57 0 / 4 0%
12 lessqqlol 57 0 / 0
12 mayonaise 57 2 / 6 33%
12 mut3d 57 1 / 1 100%
16 d0xing 53 2 / 2 100%
17 crazytodd 52 1 / 6 17%
18 ncrcs 49 0 / 6 0%
19 nagli 47 1 / 3 33%
20 todayisnew 46 1 / 1 100%
20 topenga 46 2 / 2 100%
22 ltidi 36 0 / 5 0%
22 darkpip 7 0 / 2 0%
23 cablej 32 1 / 1 100%

Showing the top 25 of 95 credited on HackerOne.

Program profile HackerOne, imported

HackerOne published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 6 Nov 2026.

Responsiveness
70% HackerOne’s figure
Swag
No
Currency
USD
Submissions
Open
Launched
Oct 2025
Scope entries
76 HackerOne’s count

Scope

76 assets
AssetTypeEligibilityMax severity
*.rhapollo.net OTHER ✓ bounty Critical
*.rhinternal.net OTHER ✓ bounty Critical
*.robinhood.com OTHER ✓ bounty Critical
*.robinhood.net OTHER ✓ bounty Critical
*.say.rocks OTHER ✓ bounty Medium
Show all 76 assets
AssetTypeEligibilityMax severity
*.saytechnologies.com OTHER ✓ bounty Medium
*.x1.co WILDCARD ✓ bounty Critical
*.x1creditcard.com WILDCARD ✓ bounty Critical
api.robinhood.com URL ✓ bounty Critical
cashier.robinhood.com URL ✓ bounty Critical
com.robinhood.android GOOGLE PLAY APP ID ✓ bounty Critical
com.robinhood.gateway GOOGLE PLAY APP ID ✓ bounty Critical
com.robinhood.global Android GOOGLE PLAY APP ID ✓ bounty Critical
com.robinhood.money GOOGLE PLAY APP ID ✓ bounty Critical
https://*.say.rocks WILDCARD ✓ bounty Critical
https://*.saytechnologies.com WILDCARD ✓ bounty Medium
Id1406825640 APPLE STORE APP ID ✓ bounty Critical
identi.robinhood.com URL ✓ bounty Critical
minerva.robinhood.com URL ✓ bounty Critical
net.bitstamp.app GOOGLE PLAY APP ID ✓ bounty Critical
nummus.robinhood.com URL ✓ bounty Critical
oak.robinhood.net URL ✓ bounty Critical
Tier 3 OTHER ✓ bounty Critical
Tier 4 OTHER ✓ bounty Critical
www.bitstamp.net URL ✓ bounty Critical
_16928ca3f53f40a48a751be40fa24e4c.bitstamp.net URL out None
_domainconnect.bitstamp.net URL out None
7671800.bitstamp.net URL out None
7671800.team.bitstamp.net URL out None
affiliates.robinhood.com URL out None
api-sandbox.tradepmr.com URL out None
api-validation.tradepmr.com URL out None
api.tradepmr.com URL out None
auth-sandbox.tradepmr.com URL out None
auth-validation.tradepmr.com URL out None
auth.tradepmr.com URL out None
autodiscover.bitstamp.net URL out None
bounces.bitstamp.net URL out None
careers.robinhood.com URL out None
content.research.robinhood.com URL out None
earlytalent.robinhood.com URL out None
em1198.bitstamp.net URL out None
em4296.team.bitstamp.net URL out None
em9457.team.bitstamp.net URL out None
enterpriseenrollment.bitstamp.net URL out None
enterpriseregistration.bitstamp.net URL out None
esg.robinhood.com URL out None
events.robinhood.com URL out None
fleet.infra.robinhood.net URL out None
fusion-demo.tradepmr.com URL out None
fusion-demo.uat.tradepmr.com URL out None
fusion-demo.uat2.tradepmr.com URL out None
fusion.tradepmr.com URL submit only Critical
fusion.uat.tradepmr.com URL out None
fusion.uat2.tradepmr.com URL out None
fusion.uat3.tradepmr.com URL out None
go.robinhood.com URL out None
https://www.saytechnologies.com/contact/sales URL out None
insight2.tradepmr.com URL submit only Critical
press.robinhood.com URL out None
roadshow.robinhood.com URL out None
sandbox.bitstamp.net URL out None
share.robinhood.com URL out None
shop.robinhood.com URL out None
startinvesting.robinhood.com URL out None
status.bitstamp.net URL out None
Tier 1 OTHER out None
Tier 2 OTHER out None
underthehoodpod.robinhood.com URL out None
url6884.team.bitstamp.net URL out None
vgs-api.robinhood.com URL out None
weareallinvestors.robinhood.com URL out None
www.tradepmr.com URL submit only Critical
1634080733 APPLE STORE APP ID ✓ bounty Critical
6462308655 APPLE STORE APP ID ✓ bounty Critical
938003185 APPLE STORE APP ID ✓ bounty Critical