{"id":"ea1fbbf5-344d-40a4-8f56-38f1000928c6","engagementId":"08ddcd4d-0ede-41eb-a2ac-9d381e110676","data":{"brief":{"id":"03fd6636-e84f-42d3-9301-dae774fc3f80","name":"Rec Room Video Games","tagline":"Help secure Rec Room!","description":"\u003ch3\u003eImportant: Do not use vulnerability scanners on this program.\u003c/h3\u003e\n\n\u003cp\u003eRec Room is the best place to build and play games together. Party up with friends from all around the world to chat, hang out, explore MILLIONS of player-created rooms, or build something new and amazing to share with us all. Rec Room is free, and cross plays on everything from phones to VR headsets. It’s the social app you play like a video game!\u003c/p\u003e\n\n\u003cp\u003eNo technology is perfect and Rec Room believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our targets. Good luck, and happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eSupport:\u003c/h2\u003e\n\n\u003cp\u003eFor bugs/issues pertaining to in game experience (that don't pose a security impact), please refer to our \u003ca href=\"https://recroom.zendesk.com/hc/en-us/articles/15063893421847-Submitting-an-In-Game-Bug-Report\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eSubmitting an In-Game Bug Report\u003c/a\u003e support article.\u003c/p\u003e\n\n\u003ch2\u003eChangelog:\u003c/h2\u003e\n\n\u003cp\u003eNew updates can be found here:\u003cbr\u003e\n\u003ca href=\"https://recroom.com/ship-notes\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://recroom.com/ship-notes\u003cbr\u003e\n\u003c/a\u003e\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e\n\n\u003ch3\u003eIn-game Items\u003c/h3\u003e\n\n\u003cp\u003e\u003cimg src=\"https://bugcrowd.com/engagements/recroom-og/attachments/64524031-f109-4aa8-bbfb-054458ab0969\" alt=\"image.png\"\u003e\u003c/p\u003e\n\n\u003cp\u003eAs a thanks for keeping Rec Room secure, we are also rewarding exclusive in-game items in addition to cash. \u003c/p\u003e\n\n\u003ch3\u003eItem Requirements\u003c/h3\u003e\n\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eRequirement\u003c/th\u003e\n\u003cth\u003eReward\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eSubmission was rewarded points\u003c/td\u003e\n\u003ctd\u003eHackola\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e25 points earned total\u003c/td\u003e\n\u003ctd\u003eHacker Suit (white)\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e50 points earned total\u003c/td\u003e\n\u003ctd\u003eHacker Hat (white)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\n\u003cp\u003eAll the items above require a Rec Room account to be received. For the Hacker Suit and Hacker Hat, we require you to share your Rec Room username in order for us to process the rewards. \u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eWe reserve the right to not reward Rec Room items for submissions, based off of our discretion after review.\u003c/strong\u003e\u003c/p\u003e\n\n\u003ch3\u003eCollaborator Points Bonus\u003c/h3\u003e\n\n\u003cp\u003eFor any submission with collaborators, the points given will be doubled and capped at total number of points rewarded for the given priority. For example, Researcher A is getting 60%, and Researcher B is getting 40%. The submission is rewarded a total of 20 points. Researcher A gets 12 points, and Researcher B gets 8 points. With item rewards, we will count these points as 20 points for Researcher A, and 16 points for Researcher B. \u003cem\u003ePlease note that if you have collaborated, your total points in our program does not include our bonus.\u003c/em\u003e\u003c/p\u003e","industryTagId":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of Rec Room not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Rec Room, you can report it to this program. However, be aware that it is ineligible for rewards or points-based compensation.\u003c/p\u003e\n\n\u003ch4\u003eExample vulnerabilities by priority level:\u003c/h4\u003e\n\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePriority\u003c/th\u003e\n\u003cth\u003eExample Vulnerability\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eP1\u003c/td\u003e\n\u003ctd\u003eAccess to game servers to manipulate code or change back end data through any means, for example through our admin pages.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP2\u003c/td\u003e\n\u003ctd\u003eAccess to developer/ moderator account, for example convert a non-moderator account to a moderator account.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP3\u003c/td\u003e\n\u003ctd\u003eGame exploits that can cause a game outage, for instance via packet manipulation, and game exploits that can be used to duplicate items or impact another player's experience in the game.\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP4\u003c/td\u003e\n\u003ctd\u003eModify values or duplicate a non-sellable item in the game on the user's local account. Anything that can affect the local user's play experience but doesn't impact other players.\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTarget Information:\u003c/h2\u003e\n\n\u003cp\u003eThe web app and API are both also in scope, but the primary target is the free cross-platform Rec Room game, which you will need to download to your device. \u003c/p\u003e\n\n\u003cp\u003eThere are many videos available of hacks and game exploits if you search for \u003ccode\u003eRec Room game exploits\u003c/code\u003e on YouTube. Major issues should have been fixed right away, but if there is a valid rewardable bug we do not know about that you learn from a video, feel free to report it. \u003c/p\u003e\n\n\u003cp\u003eRec Room Games Services In Scope:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eRec Room standalone app \u003ca href=\"https://rec.net/download\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://rec.net/download\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eSteam \u003ca href=\"https://store.steampowered.com/app/471710/Rec_Room/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://store.steampowered.com/app/471710/Rec_Room/\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eOculus Quest \u003ca href=\"https://www.oculus.com/experiences/quest/2173678582678296\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.oculus.com/experiences/quest/2173678582678296\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eOculus Rift \u003ca href=\"https://www.oculus.com/experiences/rift/1257029974329451\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.oculus.com/experiences/rift/1257029974329451\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eNintendo Switch \u003ca href=\"https://www.nintendo.com/us/store/products/rec-room-switch/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.nintendo.com/us/store/products/rec-room-switch/\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eiOS games at \u003ca href=\"https://apps.apple.com/app/id1450306065\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://apps.apple.com/app/id1450306065\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eAndroid games at \u003ca href=\"https://play.google.com/store/apps/details?id=com.AgainstGravity.RecRoom\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://play.google.com/store/apps/details?id=com.AgainstGravity.RecRoom\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eXbox \u003ca href=\"https://www.xbox.com/en-us/games/store/rec-room/9pgpqk0xthrz\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.xbox.com/en-us/games/store/rec-room/9pgpqk0xthrz\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003ePlayStation 5 \u003ca href=\"https://store.playstation.com/en-us/product/UP2662-PPSA05532_00-6681199027107223\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://store.playstation.com/en-us/product/UP2662-PPSA05532_00-6681199027107223\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003ePlayStation 4 \u003ca href=\"https://store.playstation.com/en-us/product/UP2662-CUSA08481_00-RECROOM000000001\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://store.playstation.com/en-us/product/UP2662-CUSA08481_00-RECROOM000000001\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eRec Room Studio \u003ca href=\"https://recroom.com/studio\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://recroom.com/studio\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eRecNet API Portal \u003ca href=\"https://devportal.rec.net/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://devportal.rec.net/\u003c/a\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eDocumentation:\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eRec Room New User Guide: \u003ca href=\"https://recroom.zendesk.com/hc/en-us/articles/4533930338199-New-User-Guide\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://recroom.zendesk.com/hc/en-us/articles/4533930338199-New-User-Guide\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eRec Room on iOS: \u003ca href=\"https://recroom.zendesk.com/hc/en-us/articles/4424680775575-Rec-Room-on-iOS\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://recroom.zendesk.com/hc/en-us/articles/4424680775575-Rec-Room-on-iOS\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eRec Room Discord server: \u003ca href=\"https://discord.gg/recroom\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://discord.gg/recroom\u003c/a\u003e, the FAQ section has links to information on how to play and navigate around the game. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess:\u003c/h2\u003e\n\n\u003cp\u003eThe targets are available on the public internet.\u003c/p\u003e\n\n\u003ch2\u003eCredentials:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eImportant:\u003c/strong\u003e Please sign up for an account with \"Bugcrowd\" as the first part of your username (ex: BugcrowdNinja, Bugcrowd_tester) to prevent the game moderators from accidentally banning you. \u003c/p\u003e\n\n\u003cp\u003eAfter downloading the game, to gain access to the application please sign up for an account using your @bugcrowdninja.com email address and set up an avatar. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://docs.bugcrowd.com/researchers/participating-in-program/your-bugcrowdninja-email-address/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e. This account can also be used to log in on \u003ca href=\"https://rec.net\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://rec.net\u003c/a\u003e. \u003c/p\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eIssues that allow in-game currency to be improperly generated, stolen, or manipulated. \u003c/li\u003e\n\u003cli\u003eExploits and issues that disrupt game play for other users. \u003c/li\u003e\n\u003cli\u003eVulnerabilities that allow for Rec Room account takeover.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eCompany email servers\u003c/li\u003e\n\u003cli\u003eDoS / DDoS attacks\u003c/li\u003e\n\u003cli\u003ePayment processing (handled by a third party)\u003c/li\u003e\n\u003cli\u003eDo not use vulnerability scanners on this program\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":null,"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"bea21a32-04da-469a-9bef-455b200e8a4f","name":"████████████████","targets":[{"id":"7f32dc72-c091-4614-aae5-5ec5f70e6f6a","uri":null,"name":"██████████████████████████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5dc514b1-172a-4c3f-80dc-0f5a0042fa0b","sortOrder":0},"sortOrder":0,"tags":[{"id":"9c63a0f4-0db6-40da-85f0-65d0aa72bfbe","name":"Windows","targetId":"7f32dc72-c091-4614-aae5-5ec5f70e6f6a"},{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"7f32dc72-c091-4614-aae5-5ec5f70e6f6a"}],"recentChangeFlags":null},{"id":"acb2e467-b5cf-41b6-a599-f52299651a21","uri":null,"name":"██████████████████████████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b5c99ca7-c5ea-4d72-9e92-ac600205c78e","sortOrder":1},"sortOrder":1,"tags":[{"id":"9c63a0f4-0db6-40da-85f0-65d0aa72bfbe","name":"Windows","targetId":"acb2e467-b5cf-41b6-a599-f52299651a21"},{"id":"9ffd297c-4781-4777-94cf-ef4e2ddda266","name":"C#","targetId":"acb2e467-b5cf-41b6-a599-f52299651a21"},{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"acb2e467-b5cf-41b6-a599-f52299651a21"}],"recentChangeFlags":null},{"id":"05f7a16a-b5f1-40e1-83d1-ce3b59230999","uri":null,"name":"█████████████████████████████████████████████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"294ac957-edaf-4294-96a0-ab73a1e1b434","sortOrder":2},"sortOrder":2,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"05f7a16a-b5f1-40e1-83d1-ce3b59230999"}],"recentChangeFlags":null},{"id":"206db6b9-9205-4375-a3cc-973d2323f2ef","uri":null,"name":"███████████████████████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d1625a29-51d8-481c-9786-7302452b3a27","sortOrder":3},"sortOrder":3,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"206db6b9-9205-4375-a3cc-973d2323f2ef"}],"recentChangeFlags":null},{"id":"213e024d-42af-4316-beef-c6d9b439894c","uri":null,"name":"███████████████","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f8e5f610-5fb5-4496-a25d-b6e9cccc2de2","sortOrder":4},"sortOrder":4,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"213e024d-42af-4316-beef-c6d9b439894c"}],"recentChangeFlags":null},{"id":"8425076d-7a76-4f25-9d4d-7949f0a0b43b","uri":null,"name":"███","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c5170dbb-0c25-4b79-841e-eb6385a12d2d","sortOrder":5},"sortOrder":5,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"8425076d-7a76-4f25-9d4d-7949f0a0b43b"},{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"8425076d-7a76-4f25-9d4d-7949f0a0b43b"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"8425076d-7a76-4f25-9d4d-7949f0a0b43b"}],"recentChangeFlags":null},{"id":"67cf3c04-beaa-43e9-93d5-b060564f7f09","uri":null,"name":"███████","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"18ec8b47-4264-4875-9c04-c43769145204","sortOrder":6},"sortOrder":6,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"67cf3c04-beaa-43e9-93d5-b060564f7f09"},{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"67cf3c04-beaa-43e9-93d5-b060564f7f09"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"67cf3c04-beaa-43e9-93d5-b060564f7f09"}],"recentChangeFlags":null},{"id":"2ede7a6a-92f3-4a25-ac09-34a15906e595","uri":null,"name":"█████████████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8eb61b98-fad0-46a6-ae7f-f8d596324a1f","sortOrder":7},"sortOrder":7,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"2ede7a6a-92f3-4a25-ac09-34a15906e595"}],"recentChangeFlags":null},{"id":"750540ec-ac8b-491a-8218-97f0662a338e","uri":null,"name":"█████████████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a5ee8483-fc0c-4ccb-a70c-e6868d43fefa","sortOrder":8},"sortOrder":8,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"750540ec-ac8b-491a-8218-97f0662a338e"}],"recentChangeFlags":null},{"id":"8c7031e8-8867-497d-9a15-eeb48017d09d","uri":null,"name":"████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0a1e59bd-02a7-4bd8-b4ea-ab5839abca6f","sortOrder":9},"sortOrder":9,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"8c7031e8-8867-497d-9a15-eeb48017d09d"}],"recentChangeFlags":null},{"id":"a05d95d5-c456-4966-ba68-c5752e1c87cf","uri":null,"name":"███████████████","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"86b7bf9e-6fb5-44f5-b95f-ae07d2279cf5","sortOrder":10},"sortOrder":10,"tags":[{"id":"c2f2c6ac-2793-4871-a93d-2cf8c9ae10cc","name":"Games","targetId":"a05d95d5-c456-4966-ba68-c5752e1c87cf"}],"recentChangeFlags":null},{"id":"7ae4cb3e-069d-4d60-9b2a-587d52e22094","uri":null,"name":"████████████████","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a823fc24-ce5f-483a-a0be-b45bf18df80b","sortOrder":11},"sortOrder":11,"tags":[{"id":"9ffd297c-4781-4777-94cf-ef4e2ddda266","name":"C#","targetId":"7ae4cb3e-069d-4d60-9b2a-587d52e22094"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7ae4cb3e-069d-4d60-9b2a-587d52e22094"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"7ae4cb3e-069d-4d60-9b2a-587d52e22094"}],"recentChangeFlags":null},{"id":"1a03b3f7-a3e1-494a-a7fe-b07b7f418a79","uri":null,"name":"███████████████████","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2507f1ec-b5ca-4f1e-b0aa-c1f1ef26707f","sortOrder":12},"sortOrder":12,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"1a03b3f7-a3e1-494a-a7fe-b07b7f418a79"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1a03b3f7-a3e1-494a-a7fe-b07b7f418a79"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"1a03b3f7-a3e1-494a-a7fe-b07b7f418a79"}],"recentChangeFlags":null},{"id":"b1ed794b-cc9e-4330-8a29-5efe9a1e2893","uri":null,"name":"████████████████████","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"37a36bd5-ee0d-47e1-ac2b-146638ebfcca","sortOrder":13},"sortOrder":13,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"b1ed794b-cc9e-4330-8a29-5efe9a1e2893"}],"recentChangeFlags":null},{"id":"88719da0-e394-4abc-9cb4-002f96a704ac","uri":null,"name":"██████████████████████████","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9cc47031-a6ed-4061-b9ed-28dc486b1ea0","sortOrder":14},"sortOrder":14,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"88719da0-e394-4abc-9cb4-002f96a704ac"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"88719da0-e394-4abc-9cb4-002f96a704ac"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"b406db1d-2bcf-452b-aeab-51f79047bc0d","p1MaxCents":250000,"p1MinCents":210000,"p2MaxCents":125000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":45000,"p4MaxCents":20000,"p4MinCents":15000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":2100,"max":2500},"2":{"min":1000,"max":1250},"3":{"min":450,"max":600},"4":{"min":150,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null}],"resources":[{"id":"64524031-f109-4aa8-bbfb-054458ab0969","attachmentPath":"https://bugcrowd.com/engagements/recroom-og/attachments/64524031-f109-4aa8-bbfb-054458ab0969","name":"image.png","filename":"image.png","description":null,"icon":"fileImage","size":647566,"sizeLabel":"632 KB","uploadedAt":"8 Aug 2024","fileType":"Image","embedUrl":"https://bugcrowd.com/engagements/recroom-og/attachments/64524031-f109-4aa8-bbfb-054458ab0969"}],"engagement":{"id":"08ddcd4d-0ede-41eb-a2ac-9d381e110676","code":"recroom-og","state":"in_progress_paused","endsAt":null,"bountyId":"afef38cc-aa71-4d2e-9e70-87ec0849ec3c","startsAt":"2022-03-03T19:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Games","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/82f3/f343/ef815849/b59ec6dbe1192520f39c172ccff86bfb_Rec_Room_Logo.jpeg","logoBackgroundColor":"#000000","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":"Effective immediately, we are pausing our engagement until further notice.\n\nWe apologize for the inconvenience and will let you know as soon as we have more information as to when the program will reopen.\n\nIn the interim, Bugcrowd and Rec Room will be working together to continue triaging and validating all submissions that have come in to-date.\n\nWe appreciate your patience. If you have any questions, please [create a ticket with Bugcrowd Support](https://bugcrowd-support.freshdesk.com/support/tickets/new) to get them answered.","lastTransitionAt":"2026-02-10T20:57:17.312Z","cancellationReason":null,"statusLabel":"In progress paused","routesPaths":{"brief":"/engagements/recroom-og","changelogs":"/engagements/recroom-og/changelog","submissions":null,"announcements":"/engagements/recroom-og/announcements","hallOfFame":"/engagements/recroom-og/hall_of_fames","crowdstream":"/engagements/recroom-og/crowdstream"},"announcementsCount":8,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":null,"methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=recroom-og\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/recroom-og/engagement_subscribers","engagementChangelogsUrl":"/engagements/recroom-og/changelog","publishedAt":"2026-02-10T20:57:17.343Z","engagementChangelogUrl":"/engagements/recroom-og/changelog/ea1fbbf5-344d-40a4-8f56-38f1000928c6","createUserFeedbacksUrl":"/engagements/recroom-og/feedbacks","engagementCrowdstreamUrl":"/engagements/recroom-og/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}