DECATHLON bug bounty program

YesWeHack up to $3k 5 in-scope assets

DECATHLON runs a public bug bounty program hosted on YesWeHack. The program currently lists 5 in-scope assets that authorised security researchers may test under the program's rules. Valid findings are rewarded, with payouts reaching up to $3k depending on severity.

// example in-scope assets

https://apps.apple.com/fr/app/decathlon-shopping/id1168607403https://play.google.com/store/apps/details?id=com.decathlon.apphttps://www.decathlon.(fr|ch|co.uk|it|nl|de|pt|es|be|pl|cz|ca)/https://www.decathlon.(hu|ro|com.tr)/

Always read the official policy before testing — scope, exclusions and safe-harbor terms are set by the program, and testing outside the authorised scope is not permitted. New to bug bounty? Warm up in our free hands-on labs and academy first.

open official YesWeHack program page

// more YesWeHack programs

Swiss Post - E-Voting≤ $230k Doctolib≤ $50k FDJ United (Online Betting and Gaming) - Bug Bounty program≤ $15k YesWeHack≤ $15k OVHcloud≤ $13k Swiss Post≤ $10k

// data aggregated from public YesWeHack listings · refreshed 8/24/2026 · the official program page is authoritative