Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
24 in-scope
*ripio.com· none*ripiotrade.co· criticaldefi.ripio.com· criticalauth.ripio.com· criticalapp.ripio.com· criticalbridge.ripio.com/· criticalkyc.ripio.com/· criticalsandbox-b2b.ripio.com· criticaltrade.ripio.com· criticalcom.ripio.ios· criticalbasescan.org/address/0xf469…eB30· criticaletherscan.io/address/0x0DC4…D90D· criticaletherscan.io/address/0x337E…0d34· criticaletherscan.io/address/0x4616…b0e6· criticaletherscan.io/address/0x465e…5D47· criticaletherscan.io/address/0x4F34…2eBE· criticaletherscan.io/address/0x61D4…8651· criticaletherscan.io/address/0x8a1D…2D76· criticaletherscan.io/address/0xD168…C5E7· criticaletherscan.io/address/0xD76f…90e0· criticaletherscan.io/address/0xdcC3…7986· criticalworldscan.org/address/0xDe7E…a2E0· criticalWeb3 - Smart Contracts Scope· criticalcom.ripio.android· criticalnone listed
first indexed
92d ago · 24 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Ripio.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/ripio",
"name": "Ripio",
"handle": "ripio",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": "Vulnerabilities reported in wildcard will be valid for reputation only.",
"max_severity": "none",
"asset_identifier": "*ripio.com",
"eligible_for_bounty": false,
"integrity_requirement": "not_defined",
"eligible_for_submission": true,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
},
{
"asset_type": "WILDCARD",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "*ripiotrade.co",
"eligible_for_bounty": true,
"integrity_requirement": "not_defined",
"eligible_for_submission": true,
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined"
},
{
"asset_type": "OTHER",
"instruction": "Please read the Ripio HackerOne Program - Scope & Exclusions Policy (Logic-Based)",
"max_severity": "critical",
"asset_identifier": "Web3 - Smart Contracts Scope",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "Play store download: https://play.google.com/store/apps/details?id=com.ripio.android",
"max_severity": "critical",
"asset_identifier": "com.ripio.android",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "medium"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "Apple Store iOS download: https://itunes.apple.com/us/app/ripio/id1221006761",
"max_severity": "critical",
"asset_identifier": "com.ripio.ios",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": "defi.ripio.com is an API for investing cryptocurrencies in DeFi protocols, offering deposit and withdrawal features.",
"max_severity": "critical",
"asset_identifier": "defi.ripio.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "http://auth.ripio.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "low",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://app.ripio.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://basescan.org/address/0xf469eC9dEBf7F0adEBA4d1Db2FF5c70707bEeB30",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://bridge.ripio.com/",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0x0DC4F92879B7670e5f4e4e6e3c801D229129D90D",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0x337E7456B420bD3481e7FA61fA9850343d610d34",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0x46167cB034feC6ceC46CaeD4f61281f5Aa0Eb0e6",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0x465e642387d3d73a57CDc1368fFA53A800bA5D47",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0x4F34c8b3b5FB6D98Da888F0feA543d4d9C9F2eBE",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0x61D450a098b6a7f69fC4b98CE68198fe59768651",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0x8a1D45e102e886510e891d2Ec656a708991e2D76",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0xD168CFbBE260D48cd119497a9a2eE8482080C5E7",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0xD76f5Faf6888e24D9F04Bf92a0c8B921FE4390e0",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://etherscan.io/address/0xdcC340132740AD57E9Fc90C9BD08B00dBbc87986",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "This asset corresponds to the company's identity verification system (KYC), used for the authentication and validation of users across the various platforms and services we have at Ripio. The main purpose of this system is to ensure that users meet identification requirements, helping to mitigate fraud risks, comply with regulations, and enhance platform security.",
"max_severity": "critical",
"asset_identifier": "https://kyc.ripio.com/",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "none",
"confidentiality_requirement": "high"
},
{
"asset_type": "SMART_CONTRACT",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://worldscan.org/address/0xDe7Ec97CFDeE9F20f9d256F4a0A0d694479fa2E0",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "B2B API allows a third party to access different use cases and services inside of Ripio ecosystem.",
"max_severity": "critical",
"asset_identifier": "sandbox-b2b.ripio.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "low"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "trade.ripio.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
}
],
"out_of_scope": []
},
"website": "http://ripio.com",
"offers_swag": false,
"managed_program": false,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 13,
"response_efficiency_percentage": 91,
"average_time_to_report_resolved": 103,
"average_time_to_first_program_response": 36
}