The idea is simple. Between July 20, 2016 to September 19, 2016 we want you to find as many vulnerabilities as possible. We have some awesome prizes and limited edition custom swag to reward those of you with the highest reputation and positive Signal that is generated as part of the reports in this period. You will also walk away with awesome bragging rights of ruling Hack The World 2016.

There are two brackets: Experienced and New users. If you have had at least one valid report prior to July 20, 2016 you are part of the Experienced bracket. If you have never had a valid report you are part of the New bracket. This means that all of you new to HackerOne can get up and running too! And if you already have an account, you are ready to roll!

The Prizes

At the end of the competition we will rank all HackerOne hackers by Reputation they earned from reports submitted during the contest. However, only users who have 0 Signal or above from their reports from this period will be eligible for rewards. In each bracket, Experienced and New users, the following prizes are available:

Place Prizes

1st Prize

Highest reputation
  • $1337 in prize money - cash in your hands.
  • Limited edition swag - a unique bundle with the Hack The World 2016 imagery that proudly proclaims you are the winner.
  • Pride of place - we will add you as the winner of Hack The World proudly on our website as well as on a plaque in the HackerOne office in San Francisco. We will also blog about your success and promote you on our social media accounts.

2nd Prize

2nd highest reputation
  • Eachine Racer 250 FPV Quadcopter Drone with HD Camera Eachine - an incredible drone which can stream live footage from the sky and is fully hackable.
  • Pride of place - we will add you as the 2nd place winner of Hack The World proudly on our website as well as on a plaque in the HackerOne office in San Francisco.
  • Swag Pack - we will send you a bundle of HackerOne swag including a t-shirt, stickers, and webcam cover.

Runner Up Prizes

Next 5 ranked people by reputation
  • Swag Pack - we will send you a bundle of HackerOne swag including a t-shirt, stickers, and webcam cover.

How To Participate

Everyone is welcome to join Hack The World. Don't have an account yet? No problem, go sign up and you will be part of the New user bracket. Getting involved is simple:

Step 1

Download Peter Yaworski's Web Hacking 101 e-book (worth $10). Simply click here (a HackerOne account is required) and a copy will be emailed to you.

Step 2

Register an account , find a program to hack , hack something within the program's scope, learn how to write a great report , and submit your report!

Step 3

Keep an eye on where you are in the rankings by regularly viewing the Hack The World Leaderboard . As your reputation grows (and your Signal is above 0), you will rise up the ranks!

Good luck in the competition and be sure to share your experience with the #hackerone hashtag on Twitter!

Note : you will only be eligible for Hack The World prizes if your Signal for the reports submitted in the competition period is above 0. So, be sure to submit high quality reports!

View the Hack The World Leaderboard


July 20, 2016
Hack The World is launched!

September 19, 2016
Deadline closes .

October 19, 2016
Grace period completed.

October 20, 2016
Winners announced!


  • I have never used HackerOne, can I join in?

    Sure! Just go and register an account , then find a program , hack on something within scope, and submit a report. Keep an eye on the Hack The World Leaderboard to see how you are doing!

  • How are Reputation and Signal computed?

    Every time you submit a vulnerability report you will be awarded reputation for quality reports and deducted reputation for poor quality reports. Signal is the average reputation per report. We want to ensure we are encouraging high quality reports, hence we require at least 0 Signal for hackers to be eligible in Hack The World. Read more about reputation and Signal .

  • I have negative Signal, can I participate?

    Sure! The reputation and Signal computed in Hack The World is only applied to the reports submitted in this time period. So, it is like starting over with 0 Signal. Be sure to submit good reports though!

  • What happens if there is a draw?

    If there is a draw in reputation, the hacker with the higher Signal will win. If there is a draw in both reputation and Signal, the hacker with the highest impact score will win. If there is a draw in reputation, Signal, and impact (which we assume is because of a planetary alignment) we will split the prizes between the two winners.


  • Participants may only participate in one bracket, either the Experienced or New bracket.
  • Reputation and Signal will be generated based on all reports submitted during the competition timeframe. To qualify for prizes, your Signal at the end of the competition must be at least 0.
  • Winners are determined only by Reputation within the HackerOne platform and not other platforms.
  • Only HackerOne users are eligible for participation, but signing up is easy and free.
  • If you are eligible for and want to receive a prize we will need to know your name, address, and phone number for shipping purposes. If you are eligible for the cash prizes, this will be considered taxable income and we will need you to submit a W9 form to us. We will also send you a 1099 form for your records.
  • Any participants who cheat or break the rules outlined here will be disqualified.
  • Employees of HackerOne are ineligible to participate.
  • HackerOne has the right to refuse participation of anyone.
  • Vulnerability reports must be submitted between between 12:01am PT, Wed July 20, 2016 and 11:59pm PT Mon September 19, 2016 to qualify. Any reports submitted before or after will not count towards this competition. We will have a 30 day grace period for existing reports to be reviewed by programs.
  • HackerOne's decision is final on all interpretations of contest rules, including selection of the winners.