Work at Vinted Bug Bounty? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you would rather not deal with the vendor yourself, a BugRater analyst will submit it upstream on your behalf, with your explicit permission, and tell you what came back.
Ask BugRater to submit itPrivate. The report body is encrypted at rest; BugRater holds the key, so the analyst working it can read it. Every read is logged.
Reviews
0 publishedNo reviews yet.
Facts published by Bugcrowd on the program's own page, not reported by researchers, and not part of the BugRater grade. Last checked 30 Sep 2026.
Vinted's mission is to make second-hand the first choice worldwide by building a sustainable circular model and taking it global. We are an online marketplace where members buy and sell pre-loved items directly with each other, and they trust us with their identity, their money and their home address while they do it. We ran a bug bounty program previously and it worked: 594 submissions, 155 of them valid, a lot of issues fixed before anyone outside noticed. We have moved to Bugcrowd to reach a wider crowd. We have done our best to clean up what we know about — now we would like your help finding what we missed. Ratings/Rewards For the initial prioritization/rating of findings, this engagement will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.
Scope
12 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Company Vinted | website | ✓ bounty | not set |
| Encryption Service | website | ✓ bounty | not set |
| News Vinted | website | ✓ bounty | not set |
| Vinted Android application | android | ✓ bounty | not set |
| Vinted Careers | website | ✓ bounty | not set |
Show all 12 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Vinted Go Escalations test | website | ✓ bounty | not set |
| Vinted Go Sandbox | website | ✓ bounty | not set |
| Vinted iOS application | ios | ✓ bounty | not set |
| Vinted Sandbox | website | ✓ bounty | not set |
| www.vinted.com | website | ✓ bounty | not set |
| www.vinted.net | website | ✓ bounty | not set |
| www.vintedgo.com | website | ✓ bounty | not set |