PentestingHere
Log in Join

Coinbase

Coinbase on HackerOne · HackerOne Active

Official page

Scope

At a glance

  • Bounties: Yes
  • Swag: Yes
  • Managed by the platform: Yes
  • Average first response: Not published
  • Average time to resolution: Not published

In scope

  • *.base.app
  • *.base.org
  • *.cbhq.net
  • *.coinbase-corp.com
  • *.coinbase.com
  • 54.175.255.192/27
  • Other
  • com.coinbase.android
  • com.vilcsak.bitcoin2
  • https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad
  • https://github.com/base/*
  • https://github.com/coinbase/*
  • https://github.com/coinbase/cb-mpc
  • https://github.com/coinbase/cb-mpc-go
  • org.toshi
  • org.toshi.distribution

Out of scope

  • N/A - Not Coinbase owned or operated
  • status.*.coinbase.com
  • status.coinbase.com

Imported from the public directory. Always confirm scope on the official program page before testing.

Is it worth your time?

Read the community feedback

0 reviews rating communication, triage, payouts and whether it suits beginners.

Open feedback