vulns.co
/
GKData.io MCP

Bugcrowd · 2 min read

Wise (ex-TransferWise)

Paid Bounty · $100 - $4,000

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Official directory card labeled Bug Bounty. Monetary reward displayed. Program policy and submission status not reviewed.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 9 published rows
AssetTypeGroup / eligibility
transferwise.comPublished location: https://transferwise.comwebsiteIn scope targets
*.transferwise.comwebsiteIn scope targets
wise.comPublished location: https://wise.comwebsiteIn scope targets
*.wise.comwebsiteIn scope targets
Latest version of Wise iOS AppPublished location: https://apps.apple.com/us/app/wise-ex-transferwise/id612261027iosIn scope targets
Latest version of Wise Android AppPublished location: https://play.google.com/store/apps/details?id=com.transferwise.android&hl=en_US&gl=USandroidIn scope targets
AWS infrastructure and services in use by Wise (eg: S3 buckets)otherIn scope targets
github.com/transferwise/*Published location: https://github.com/transferwise/*otherIn scope targets
*.wise-sandbox.comPublished location: https://wise-sandbox.com/websiteSandbox environment
Out of scope · 22 published rows
AssetTypeGroup / eligibility
Wise Affiliate ProgramwebsiteOut of scope targets
Third party services not hosted by WisewebsiteOut of scope targets
Any Github asset not under the “transferwise” organizationotherOut of scope targets
Third party authentication services (eg: Facebook and Google)websiteOut of scope targets
https://transferwise.com/help/contactwebsiteOut of scope targets
https://wise.com/help/contactwebsiteOut of scope targets
*.tw.comwebsiteOut of scope targets
*.tw.eewebsiteOut of scope targets
Non-current version of the Android appandroidOut of scope targets
Non-current version of the iOS appiosOut of scope targets
*.transferwise.techwebsiteOut of scope targets
brand.wise.comwebsiteOut of scope targets
links.wise.comwebsiteOut of scope targets
widgets.transferwise.comwebsiteOut of scope targets
brand.transferwise.comwebsiteOut of scope targets
bootstrap.transferwise.comwebsiteOut of scope targets
links.transferwise.comwebsiteOut of scope targets
status.wise.comwebsiteOut of scope targets
status.transferwise.comwebsiteOut of scope targets
tech.transferwise.comwebsiteOut of scope targets
docs.wise.comotherOut of scope targets
github.com/transferwise/pipelinewisePublished location: https://github.com/transferwise/pipelinewiseotherOut of scope targets

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty, Bugcrowd. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

d5550c789111 · JSON exports & schemas · CC BY 4.0 content / MIT software