Immutable Bug Bounty

{
  "name": "Immutable Bug Bounty",
  "url": "https://bugcrowd.com/engagements/immutable",
  "allows_disclosure": false,
  "managed_by_bugcrowd": true,
  "safe_harbor": "full",
  "max_payout": 10000,
  "targets": {
    "in_scope": [
      {
        "type": "website",
        "target": "https://passport.immutable.com/",
        "uri": "https://passport.immutable.com/",
        "name": "passport.immutable.com - Passport web3 wallet",
        "ipAddress": ""
      },
      {
        "type": "api",
        "target": "https://auth.immutable.com",
        "uri": "https://auth.immutable.com",
        "name": "auth.immutable.com - Passport authentication backend",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "https://github.com/immutable/ts-immutable-sdk/tree/main/packages/passport/",
        "uri": "https://github.com/immutable/ts-immutable-sdk/tree/main/packages/passport/",
        "name": "Passport SDK",
        "ipAddress": ""
      },
      {
        "type": "website",
        "target": "https://hub.immutable.com/",
        "uri": "https://hub.immutable.com/",
        "name": "hub.immutable.com - Developer Hub",
        "ipAddress": ""
      },
      {
        "type": "website",
        "target": "https://play.immutable.com",
        "uri": "https://play.immutable.com",
        "name": "play.immutable.com Immutable Play",
        "ipAddress": ""
      },
      {
        "type": "api",
        "target": "https://api.immutable.com",
        "uri": "https://api.immutable.com",
        "name": "https://api.immutable.com",
        "ipAddress": ""
      },
      {
        "type": "api",
        "target": "https://api.x.immutable.com/",
        "uri": "https://api.x.immutable.com/",
        "name": "https://api.x.immutable.com/",
        "ipAddress": null
      }
    ],
    "out_of_scope": [
      {
        "type": "other",
        "target": "*.godsunchained.com",
        "uri": "",
        "name": "*.godsunchained.com",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "*.gogbackend.com",
        "uri": "",
        "name": "*.gogbackend.com",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "gogbackend.com",
        "uri": "",
        "name": "gogbackend.com",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "godsunchained.com",
        "uri": "",
        "name": "godsunchained.com",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "Anything that does not belong to Immutable",
        "uri": "",
        "name": "Anything that does not belong to Immutable",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "Any data exposure bug that are classified as Public Data such as Ethereum Wallet Address, NFT Purchase activity, or other public blockchain activity.",
        "uri": "",
        "name": "Any data exposure bug that are classified as Public Data such as Ethereum Wallet Address, NFT Purchase activity, or other public blockchain activity.",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "*.dev.x.immutable.com, *.sandbox.x.immutable.com, *.dev.x.immutable.com, *.sandbox.imtbl.com, *.dev.imtbl.com, *.ropsten.x.immutable.com, ropsten.imx.community (see brief for exceptions)",
        "uri": "",
        "name": "*.dev.x.immutable.com, *.sandbox.x.immutable.com, *.dev.x.immutable.com, *.sandbox.imtbl.com, *.dev.imtbl.com, *.ropsten.x.immutable.com, ropsten.imx.community (see brief for exceptions)",
        "ipAddress": ""
      },
      {
        "type": "other",
        "target": "*.guildofguardians.com",
        "uri": "",
        "name": "*.guildofguardians.com",
        "ipAddress": ""
      }
    ]
  }
}