Vulnerability Disclosure Program (VDP)
VDPs are meant for responsibly reporting vulnerabilities you encounter — not for actively hunting for fame or reputation. Even if you're just starting out, consider focusing on rewarded bug bounty programs instead.
binance
20
In Scope
10
Out of Scope
In-Scope Assets (20)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| 3rdparty-apis.coinmarketcap.com | URL | No | ||
| Binance Desktop Application | OTHER | No | - | |
| Binance Mobile Application for Android | ANDROID | No | - | |
| Binance Mobile Application for iOS | IOS | No | - | |
| Binance macOS Application | OTHER | No | - | |
| CoinMarketCap Android app | ANDROID | No | - | |
| CoinMarketCap iOS app | IOS | No | - | |
| Trustwallet Android App | ANDROID | No | - | |
| Trustwallet Chrome Extension | URL | No | - | |
| Trustwallet iOS App | IOS | No | - | |
| api.binance.com | URL | No | ||
| api.coinmarketcap.com | URL | No | ||
| coinmarketcap.com | URL | No | ||
| https://binance.tr | URL | No | ||
| https://github.com/trustwallet/wallet-core/ | OTHER | No | - | |
| https://www.binance.com/ | URL | No | ||
| https://www.binance.us/ | URL | No | ||
| portal-api.coinmarketcap.com | URL | No | ||
| pro-api.coinmarketcap.com | URL | No | ||
| pro.coinmarketcap.com | URL | No |
Out-of-Scope Assets (10)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.binance.org | URL | No | |
| *.coinmarketcap.com | OTHER | No | |
| *.trustwallet.com | URL | No | |
| *.trustwalletapp.com | URL | No | |
| binance.sg | URL | No | |
| blockchain.coinmarketcap.com | URL | No | |
| blog.coinmarketcap.com | URL | No | |
| jobs.coinmarketcap.com | URL | No | |
| support.binance.* | URL | No | |
| support.coinmarketcap.com | URL | No |