Bitso Managed Bug Bounty Engagement

At a glance#

• Maximum payout: $7,500
• Public disclosure: Not allowed
• Managed by the platform: Yes
• Safe harbour: Full

In scope#

• https://bitso.com
• https://nvio.mx/
• https://nvio.ar/
• https://apps.apple.com/us/app/bitso-buy-bitcoin-easily/id1292836438
• https://apps.apple.com/us/app/bitso-alpha-crypto-trade-pro/id1539469172
• https://play.google.com/store/apps/details?id=com.bitso.wallet&pcampaignid=web_share
• https://play.google.com/store/apps/details?id=com.bitso.alpha

Out of scope#

• help.bitso.com
• status.bitso.com
• dev.bitso.com
• blog.bitso.com
• stage.bitso.com
• landing.bitso.com
• devmalta.bitso.com
• edu.bitso.com
• sandbox.bitso.com
• api-dev.bitso.com
• api-stage.bitso.com
• api-sandbox.bitso.com
• stagemalta.bitso.com
• *.otc.bitso.com
• *.efx.bitso.com
• quetzal.bitso.com
• login.bitso.io
• bitsohelp.zendesk.com
• support.bitso.com

Imported from the public directory. Always confirm scope on the official program page before testing.