MetaMask

At a glance#

• Bounties: Yes
• Swag: Yes
• Managed by the platform: Yes
• Average first response: 1 days
• Average time to resolution: 49.3 days

In scope#

• *.api.cx.metamask.io
• MetaMask Browser Extension
• MetaMask SDK
• Snaps
• Third Party Snaps
• api-wallet.web3auth.io
• https://*.metamask.io
• https://metamask.github.io/phishing-warning/<vX.Y.Z>
• io.metamask
• io.metamask.Metamask
• mUSD Stablecoin
• metamask.io
• signature-insights.api.cx.metamask.io
• snaps.metamask.io
• wallet.web3auth.io

Out of scope#

• Core Tier Assets
• Message signing snap
• Metamask Flask Extension
• Non-Core Tier Assets
• Snaps Development Packages
• Wallet Tier Assets
• api-dashboard.web3auth.io
• card.metamask.io
• community.metamask.io
• dashboard.web3auth.io
• developer.metamask.io
• https://github.com/Web3Auth/web3auth-web
• https://metamask.github.io/
• https://mmi-support.metamask.io/
• https://support.metamask.io/
• https://user-storage.api.cx.metamask.io
• https://www.npmjs.com/search?q=%40metamask
• permissionless.snaps.metamask.io
• portfolio.metamask.io (app.metamask.io)
• travel.metamask.io

Imported from the public directory. Always confirm scope on the official program page before testing.