Report a Vulnerability
Submit, help fixing, get kudos.
Start a Bug Bounty
Run your bounty program for free.
492,052 coordinated disclosures
268,540 fixed vulnerabilities
662 bug bounties with 1,340 websites
13,641 researchers, 1033 honor badges

TradingView Bug Bounty Program

TradingView runs a bug bounty program to ensure the highest security and privacy of its websites. Everyone is eligible to participate in the program subject to the below-mentioned conditions and requirements of TradingView

Open Bug Bounty performs triage and verification of the submissions. However, we never intervene to the further process of vulnerability remediation and disclosure between TradingView and researchers.

Bug bounty program allow private and public submissions.

Bug Bounty Scope

The following websites are within the scope of the program:

*.tradingview.com

Non-Intrusive Submissions Handling

The following section encompasses submission of the vulnerabilities that do not require intrusive testing as per Open Bug Bounty rules:

- Cross Site Scripting (XSS)
- Open Redirect

- Cross Site Request Forgery (CSRF)
- Improper Access Control

General Requirements:

Our rules https://www.tradingview.com/bounty/

Testing Requirements:

You should not use automated tools and scanners to find vulnerabilities. We'll not review scanner-generated reports.
You should not perform any attack that could damage our services, our or client data. DDoS, spam, brute force attacks are not permitted.
You should not involve other users without their explicit consent.
You should not perform or try to perform non-technical attacks such as social engineering, phishing or physical attacks against our employees, users or infrastructure.

Possible Awards:

Your reward will depend on the vulnerability discovered as well as its security impact.
Up to $1500 for a vulnerability that affects our entire platform.
Up to $700 for a vulnerability that doesn’t require user interaction and affects many users.
Up to $300 for a vulnerability that requires user interaction or affects individual users.
See details at https://www.tradingview.com/bounty/

Other Submissions Handling

Website owner want to receive information about other vulnerabilities

Notifications:

If you have found a security bug and want to report it to us, please email us at
[email protected]

General Requirements:

Our rules https://www.tradingview.com/bounty/

Testing Requirements:

You should not use automated tools and scanners to find vulnerabilities. We'll not review scanner-generated reports.
You should not perform any attack that could damage our services, our or client data. DDoS, spam, brute force attacks are not permitted.
You should not involve other users without their explicit consent.
You should not perform or try to perform non-technical attacks such as social engineering, phishing or physical attacks against our employees, users or infrastructure.

Possible Awards:

Your reward will depend on the vulnerability discovered as well as its security impact.
Up to $1500 for a vulnerability that affects our entire platform.
Up to $700 for a vulnerability that doesn’t require user interaction and affects many users.
Up to $300 for a vulnerability that requires user interaction or affects individual users.
See details at https://www.tradingview.com/bounty/

Community Rating

Provided by security researchers who reported security vulnerabilities via this bug bounty program:

 
Response Time  How quickly researchers get responses to their submissions.
Remediation Time  How quickly reported submissions are fixed.
Cooperation and Respect  How fairly and respectfully researchers are being treated.

Researcher's comments

No comments so far.

  Latest Patched

 21.01.2020 kosmo.com.my
 21.01.2020 grandrapidsmi.gov
 20.01.2020 frandroid.com
 20.01.2020 vanityfair.com
 20.01.2020 utusan.com.my
 20.01.2020 60secondsnow.com
 20.01.2020 zapmeta.ng
 20.01.2020 genyt.net
 20.01.2020 baku.ws
 20.01.2020 cqu.edu.au

  Latest Blog Posts

20.01.2020 by Rando02355205
XSS on "www.alibaba.com" (Alibaba WAF 405) Bypassed.
16.01.2020 by Open Bug Bounty
Brief Recap of Open Bug Bounty’s Record Growth in 2019
12.01.2020 by JCQ_47
WAF Cloudflare Bypass XSS at Nexusmods.com
08.01.2020 by devl00p
Top 100 Open Redirect dorks
08.01.2020 by Rando02355205
XSS WAF Bypassed

  Recent Recommendations

    21 January, 2020
     astroseekcom:
Thank you for report about SQL vulnerability.
    20 January, 2020
     PaulMar23292621:
Miguel showed us several information disclosure issues with our site. Thank you very much Miguel!
    18 January, 2020
     damnitjim:
Thanks for taking the time to report the weaknesses and really appreciate the wapiti tool that you've developed.
    17 January, 2020
     gexsi_search:
Many thanks for your support!
    17 January, 2020
     smay84:
Thank you for your quick response and helpful information.