Early access. This site has moved to bugrater.com.

In brief. Vinted Bug Bounty is a bug bounty program on Bugcrowd. Bounties range from $75 to $8,000. 15 assets are listed in scope, 15 of them bounty-eligible. As of Sep 30, 2026. Markdown for agents

NR Unrated

Vinted Bug Bounty

Vinted Bug Bounty Bugcrowd $75–$8,000
3 more reviews needed for a grade
Write a review Claim this company profile

Work at Vinted Bug Bounty? Claim it to respond to reviews as the verified owner.

Found a vulnerability?

If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.

Ask BugRater to submit it

Reports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.

Reviews

0 published

No reviews yet.

Be the first to review

Program profile Bugcrowd, imported

Bugcrowd published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade. Last checked 14 Nov 2026.

Vinted's mission is to make second-hand the first choice worldwide by building a sustainable circular model and taking it global. We are an online marketplace where members buy and sell pre-loved items directly with each other, and they trust us with their identity, their money and their home address while they do it. We ran a bug bounty program previously and it worked: 594 submissions, 155 of them valid, a lot of issues fixed before anyone outside noticed. We have moved to Bugcrowd to reach a wider crowd. We have done our best to clean up what we know about — now we would like your help finding what we missed. Ratings/Rewards For the initial prioritization/rating of findings, this engagement will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.

Currency
USD
Submissions
Open
Scope entries
16 Bugcrowd’s count

Scope

16 assets
AssetTypeEligibilityMax severity
Company Vinted website ✓ bounty not set
Encryption Service website ✓ bounty not set
News Vinted website ✓ bounty not set
Vinted network ✓ bounty not set
Vinted Android application android ✓ bounty not set
Show all 16 assets
AssetTypeEligibilityMax severity
Vinted Careers website ✓ bounty not set
Vinted Go network ✓ bounty not set
Vinted Go Escalations test website ✓ bounty not set
Vinted Go g_integrations network ✓ bounty not set
Vinted Go Integrations network ✓ bounty not set
Vinted Go Sandbox website ✓ bounty not set
Vinted iOS application ios ✓ bounty not set
Vinted Sandbox website ✓ bounty not set
www.vinted.com website ✓ bounty not set
www.vinted.net website ✓ bounty not set
www.vintedgo.com website ✓ bounty not set