Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Coinbase.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 1142,
"average_time_to_first_program_response": null,
"average_time_to_report_resolved": null,
"handle": "coinbase",
"id": 0,
"managed_program": true,
"name": "Coinbase",
"offers_bounties": true,
"offers_swag": true,
"response_efficiency_percentage": 76,
"submission_state": "open",
"url": "https://hackerone.com/coinbase",
"website": "https://coinbase.com/security",
"targets": {
"in_scope": [
{
"asset_identifier": "*.base.app",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "*.base.org",
"asset_type": "OTHER",
"availability_requirement": "medium",
"confidentiality_requirement": "none",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": "low",
"max_severity": "critical"
},
{
"asset_identifier": "*.cbhq.net",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "*.coinbase-corp.com",
"asset_type": "WILDCARD",
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "not_defined",
"max_severity": "critical"
},
{
"asset_identifier": "*.coinbase.com",
"asset_type": "URL",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Coinbase's main domain.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "54.175.255.192/27",
"asset_type": "CIDR",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "Other",
"asset_type": "OTHER",
"availability_requirement": "low",
"confidentiality_requirement": "low",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Applications that may have been missed as a part of our standard scope; this will be assessed on a by submission basis. ",
"integrity_requirement": "low",
"max_severity": "medium"
},
{
"asset_identifier": "com.coinbase.android",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Coinbase's retail mobile app on Android.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "com.vilcsak.bitcoin2",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Coinbase's retail mobile app on iOS.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/base/*",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/coinbase/*",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/coinbase/cb-mpc",
"asset_type": "SOURCE_CODE",
"availability_requirement": "not_defined",
"confidentiality_requirement": "not_defined",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": "not_defined",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/coinbase/cb-mpc-go",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "While we appreciate submissions regarding this repo, this repo is not eligible for bounties.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "org.toshi",
"asset_type": "GOOGLE_PLAY_APP_ID",
"availability_requirement": "low",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Base Android app",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "org.toshi.distribution",
"asset_type": "APPLE_STORE_APP_ID",
"availability_requirement": "medium",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Base iOS app",
"integrity_requirement": "high",
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "N/A - Not Coinbase owned or operated",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "This asset labelling is used to signal to a reporter that the asset in question is not owned or operated by Coinbase in any capacity.",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "status.*.coinbase.com",
"asset_type": "WILDCARD",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "status.coinbase.com",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": "",
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}*.coinbase-corp.comcom.vilcsak.bitcoin2· criticalorg.toshi.distribution· critical*.base.org· critical54.175.255.192/27· criticalOther· mediumcom.coinbase.android· criticalchrome.google.com/webstore/detail/…-wallet-extension/hnfank…naad· criticalorg.toshi· criticalstatus.*.coinbase.comN/A - Not Coinbase owned or operated