iFood: Bug Bounty Program

  • $150 – $2,500 per vulnerability
  • Up to $2,600 maximum reward
  • Safe harbor

Updates: new test restaurants added - please read

When entering https://www.ifood.com.br, iFood Customer iOS Application, iFood Customer Android Application).

Enter "Travessa Bujari (Bujari - State of Acre, Brazil)" as your current address with any number.

You should be able to see 2 restaurants:

  • "Teste Restaurante" and "Teste Treinamento" - Site_Mercado(for scheduling).
  • Orders on these restaurants won't be charged or concluded but it's a good way to test our flow.

If you have any questions, please reach out to support@bugcrowd.com.