2x Reward Weekend (Highs, Criticals, & Exceptionals)
9/19/2025, 3:50:57 PM (27 days ago)

Hey Researchers,

From now until Sunday the 21st at 11:59PM EST valid findings with a severity of high and above will receive 2x rewards. (Asset must belong to The Coca-Cola Company and not a bottler or partner)

Happy Hacking,

Tyler @ Coca-Cola

2x Rewards for the CokeOn App this week
1/7/2025, 2:42:16 PM (9 months ago)

Hey Everyone,

Happy new year from us here at Coca-Cola!

From now until Friday, January 10th 2025 at 11:59 PM Eastern Standard Time, we are offering double rewards for any vulnerabilities accepted for select CokeOn mobile applications highlighted on the VDP details page.

We look forward to your findings, happy hunting!

NEW Targets of Interest
9/24/2024, 1:50:42 PM (about 1 year ago)

Hey Everyone,

We are excited to highlight Hindustan Coca-Cola Beverages in our vulnerability disclosure program. Scope and more details are available on our VDP page. We look forward to your findings!

DNS Zone Takeovers are currently set as out-of-scope. Regular SDTO will still be accepted.
9/3/2024, 4:15:05 PM (about 1 year ago)
9/3/2024, 4:15:30 PM

As we implement internal changes, DNS Zone takeovers have been set as out-of-scope for the time being. Please continue to submit any regular SDTO you find. Happy Hunting!