Does EXMO have a bug bounty program?

Yes, EXMO runs a public bug bounty program on HackenProof, with rewards up to $3.0K. It currently lists 5 in-scope assets.

How much does EXMO pay for bug bounties?

EXMO's published reward range on HackenProof is up to $3.0K. Actual payouts depend on severity and scope.

programs/HackenProof/exmo

EXMO

hackenproofHackenProof·updated 7d ago

bountymanaged

Discord → RSS

max reward: $3.0K
scope: 5 in · 3 out
safe harbor: unknown
response: no reports

open program

61

hunt score

$cashnew

formula →

payout

16/55

bounty

20/20

freshness

25/25

how we sort the index, not an estimate of what you’ll earn

Attack surface

5 in-scope

1urls
1wildcards
1apis
1android
1ios

Scope

In scope

005

wildcards01

+*.exmo.comscope· Critical

urls01

+exmo.com· Critical

apis01

+api.exmo.com· Critical

android01

+play.google.com/store/apps/details?id=com.exmo· Critical

ios01

+apps.apple.com/app/id1505496232?mt=8· Critical

Out of scope

003

−info.exmo.comurl· None
−exmo-coin.exmo.comurl· None
−support.exmo.comurl· None

Change history

1 event

2026-10-29
first indexed
7d ago · 5 in-scope assets

// only one snapshot on record, changes appear from the next ingest onward

Community reports

0 reports

No reports yet. Be the first to share your triage timing for EXMO.

// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.

Your notes

▸ raw source payload

{
  "assetTypes": [
    "Web",
    "apps"
  ],
  "stage1Hash": "041e0ce7c7a18706c3e8f646161774d31727b4f4ae7b0591dc4c7fc51cdb2ced",
  "description": "EXMO is a global cryptocurrency exchange. The platform was established in 2014 and is constantly expanding its functionality, adding new assets to the listing, and, most importantly, increasing the number of customers.",
  "projectTypes": [
    "CEX"
  ]
}