wildhunter.
← Back to programs

Coinbase

Coinbase · HackerOne · added Mar 28, 2014

High competitionWeb

Coinbase's Bug Bounty Program exists to protect our two highest-priority assets: customer funds and customer information. We reward researchers who responsibly …

Metrics

Bounty range
Paid this month$0
Reports0/mo
Hunters0

Beginner fit

54/100

Estimated: this program accepts low-severity findings worth reporting.

Time to triage3d
Time to first bounty21d

Activity metrics for this program aren't exposed by the platform API, so the scores above are conservative estimates. Always verify on the program page before submitting.

Engage

Open on HackerOne

Always read the full policy on the platform before submitting. Scope below is a summary only.

Scope assets16
Bounty floor$0

In-scope assets

  • *.coinbase.com
  • com.coinbase.android
  • 54.175.255.192/27
  • *.cbhq.net
  • Other
  • org.toshi
  • org.toshi.distribution
  • https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad
  • *.base.org
  • https://github.com/coinbase/cb-mpc
  • *.coinbase-corp.com
  • com.vilcsak.bitcoin2
  • https://github.com/coinbase/cb-mpc-go
  • https://github.com/coinbase/*
  • https://github.com/base/*

Fetched live from the HackerOne API.

Wanted categories

General