# Status: bug bounty program on HackenProof

> Status is a bug bounty program on HackenProof. 8 assets are listed in scope.

- **Company:** Status
- **Platform:** HackenProof
- **Program page:** https://hackenproof.com/programs/status
- **Pays bounties:** yes
- **Submissions:** paused
- **Launched:** March 15, 2023
- **BugRater grade:** not graded yet (fewer than three reviewers)
- **BugRater page:** https://bugrater.com/programs/status

## Scope

As imported from HackenProof on October 21, 2026: 8 assets in scope (0 bounty-eligible), 4 out of scope. The policy page is the authority.

- `*.staging.status.im` (WILDCARD): out of scope
- `*.status.app` (WILDCARD): in scope, no bounty
- `*.status.im` (WILDCARD): in scope, no bounty
- `dev.*.status.im` (WEB): out of scope
- `https://apps.apple.com/us/app/status-private-communication/id1178893006` (URL): in scope, no bounty
- `https://discuss.status.im/` (URL): out of scope
- `https://status-im-files.ams3.cdn.digitaloceanspaces.com/StatusIm-Mobile-v1.19.0-d6a6c4.apk` (URL): in scope, no bounty
- `https://status.app/` (URL): in scope, no bounty
- `https://status.app/api/download/linux` (URL): in scope, no bounty
- `https://status.app/api/download/windows` (URL): in scope, no bounty
- `Status Smart Contracts` (SMART_CONTRACT): in scope, no bounty
- `test.*.status.im` (WEB): out of scope

---

Generated October 23, 2026 from BugRater data. Platform figures are the platform's own; grades and reviews are BugRater's. Agents can check targets against this scope with the check_scope tool at https://bugrater.com/mcp.