In brief. Vinted Bug Bounty is a bug bounty program on Bugcrowd. Bounties range from $75 to $8,000. 15 assets are listed in scope, 15 of them bounty-eligible.
Vinted Bug Bounty
Work at Vinted Bug Bounty? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.
Ask BugRater to submit itReports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.
Reviews
0 publishedNo reviews yet.
Bugcrowd published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 14 Nov 2026.
Vinted's mission is to make second-hand the first choice worldwide by building a sustainable circular model and taking it global. We are an online marketplace where members buy and sell pre-loved items directly with each other, and they trust us with their identity, their money and their home address while they do it. We ran a bug bounty program previously and it worked: 594 submissions, 155 of them valid, a lot of issues fixed before anyone outside noticed. We have moved to Bugcrowd to reach a wider crowd. We have done our best to clean up what we know about — now we would like your help finding what we missed. Ratings/Rewards For the initial prioritization/rating of findings, this engagement will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.
Scope
16 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Company Vinted | website | ✓ bounty | not set |
| Encryption Service | website | ✓ bounty | not set |
| News Vinted | website | ✓ bounty | not set |
| Vinted | network | ✓ bounty | not set |
| Vinted Android application | android | ✓ bounty | not set |
Show all 16 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Vinted Careers | website | ✓ bounty | not set |
| Vinted Go | network | ✓ bounty | not set |
| Vinted Go Escalations test | website | ✓ bounty | not set |
| Vinted Go g_integrations | network | ✓ bounty | not set |
| Vinted Go Integrations | network | ✓ bounty | not set |
| Vinted Go Sandbox | website | ✓ bounty | not set |
| Vinted iOS application | ios | ✓ bounty | not set |
| Vinted Sandbox | website | ✓ bounty | not set |
| www.vinted.com | website | ✓ bounty | not set |
| www.vinted.net | website | ✓ bounty | not set |
| www.vintedgo.com | website | ✓ bounty | not set |