coinbase

HackerOneView on HackerOne
RawAI Enhanced
16
In Scope
3
Out of Scope
In-Scope Assets (16)
AssetCategoryBountyQuick Links
*.base.appWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.base.orgOTHERYes-
*.cbhq.netURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.coinbase-corp.comWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.coinbase.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
54.175.255.192/27CIDRYes
ShodanCensysBGP HE
OtherOTHERNo-
com.coinbase.androidANDROIDYes
Play StoreAPKPureAPKMirror
com.vilcsak.bitcoin2IOSYes-
https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaadOTHERYes-
https://github.com/base/*CODEYes-
https://github.com/coinbase/*CODEYes-
https://github.com/coinbase/cb-mpcCODEYes-
https://github.com/coinbase/cb-mpc-goCODENo-
org.toshiANDROIDYes
Play StoreAPKPureAPKMirror
org.toshi.distributionIOSYes-
Out-of-Scope Assets (3)
AssetCategoryBounty
N/A - Not Coinbase owned or operatedOTHERNo
status.*.coinbase.comWILDCARDNo
status.coinbase.comURLNo
Scope Changes (150)
Aug 7, 2026
ChangeAssetCategoryScopeTime
Added*.base.appWILDCARDIn Scope19:47
Added*.base.appWILDCARDIn Scope19:47
Removedparadex.ioURLOut of Scope18:47
Removed*.coinbase.comURLIn Scope18:47
Removedcom.coinbase.androidANDROIDIn Scope18:47
RemovedotherOTHERIn Scope18:47
Removedorg.toshiANDROIDIn Scope18:47
Removedorg.toshi.distributionIOSIn Scope18:47
Removedcom.vilcsak.bitcoin2IOSIn Scope18:47
Addedhttps://github.com/coinbase/*CODEIn Scope18:47
Addedhttps://github.com/base/*CODEIn Scope18:47
Addedstatus.*.coinbase.comWILDCARDOut of Scope18:47
Removedhttp://coinbase.comURLIn Scope18:47
Removedblog.coinbase.comURLOut of Scope18:47
Removedengineering.coinbase.comURLOut of Scope18:47
Removedcom.coinbase.proANDROIDOut of Scope18:47
Removedsupport.coinbase.comURLOut of Scope18:47
Removedapi.custody.coinbase.comURLIn Scope18:47
Removedcloud.coinbase.comURLIn Scope18:47
Removedapi.coinbase.comURLIn Scope18:47
Removedcommerce.coinbase.comURLIn Scope18:47
Removedhttps://base.orgBLOCKCHAINIn Scope18:47
Removednft.coinbase.comURLIn Scope18:47
Removedpro.coinbase.comURLIn Scope18:47
Removedcom.coinbase.proIOSOut of Scope18:47
Removedsupport.pro.coinbase.comURLOut of Scope18:47
Removedtagomi.comURLOut of Scope18:47
Removedcustody.coinbase.comURLIn Scope18:47
Removedcom.coinbase.walliteANDROIDIn Scope18:47
Removedprime.coinbase.comURLIn Scope18:47
Removeddevelopers.coinbase.comURLOut of Scope18:47
Removed*.blockspring.comURLOut of Scope18:47
Removedweb3 smart contractsOTHERIn Scope18:47
Removedcoinbase.comURLIn Scope18:47
Removedinstitutional.coinbase.comURLIn Scope18:47
Removedcoinbase waas (wallet as a service)OTHERIn Scope18:47
Removedinternational.coinbase.comURLIn Scope18:47
Addedhttps://github.com/coinbase/*WILDCARDIn Scope18:47
Addedhttps://github.com/base/*WILDCARDIn Scope18:47
Addedstatus.*.coinbase.comWILDCARDOut of Scope18:47
Mar 26, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/coinbase/cb-mpc-goCODEOut of Scope18:21
Addedhttps://github.com/coinbase/cb-mpc-goCODEIn Scope18:21
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedcoinbase.comURLIn Scope19:08
Addednft.coinbase.comURLIn Scope19:08
Addedcoinbase waas (wallet as a service)OTHERIn Scope19:08
Addedstatus.coinbase.comURLOut of Scope19:08
Added*.blockspring.comWILDCARDOut of Scope19:08
Added*.cbhq.netWILDCARDIn Scope19:08
Addedcustody.coinbase.comURLIn Scope19:08
Addedhttps://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaadOTHERIn Scope19:08
Added*.base.orgWILDCARDIn Scope19:08
Addedinternational.coinbase.comURLIn Scope19:08
Added*.coinbase-corp.comWILDCARDIn Scope19:08
Addedsupport.pro.coinbase.comURLOut of Scope19:08
Addedcommerce.coinbase.comURLIn Scope19:08
Addedcom.vilcsak.bitcoin2IOSIn Scope19:08
Addedsupport.coinbase.comURLOut of Scope19:08
Addedengineering.coinbase.comURLOut of Scope19:08
Addedcom.coinbase.androidANDROIDIn Scope19:08
Addedorg.toshi.distributionIOSIn Scope19:08
Addedapi.coinbase.comURLIn Scope19:08
Addedcloud.coinbase.comURLIn Scope19:08
Addedcom.coinbase.walliteANDROIDIn Scope19:08
Addedapi.custody.coinbase.comURLIn Scope19:08
Addedhttps://github.com/coinbase/cb-mpcCODEIn Scope19:08
Addeddevelopers.coinbase.comURLOut of Scope19:08
AddedotherOTHERIn Scope19:08
Addedinstitutional.coinbase.comURLIn Scope19:08
Addedblog.coinbase.comURLOut of Scope19:08
Addedn/a - not coinbase owned or operatedOTHEROut of Scope19:08
Addedtagomi.comURLOut of Scope19:08
Added*.coinbase.comWILDCARDIn Scope19:08
Addedorg.toshiANDROIDIn Scope19:08
Addedhttps://base.orgURLIn Scope19:08
Addedweb3 smart contractsOTHERIn Scope19:08
Addedhttp://coinbase.comURLIn Scope19:08
Added54.175.255.192/27CIDRIn Scope19:08
Addedcom.coinbase.proIOSOut of Scope19:08
Addedparadex.ioURLOut of Scope19:08
Addedcom.coinbase.proANDROIDOut of Scope19:08
Addedprime.coinbase.comURLIn Scope19:08
Addedpro.coinbase.comURLIn Scope19:08
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedcommerce.coinbase.comURLIn Scope00:40
Addedcustody.coinbase.comURLIn Scope00:40
Addedsupport.coinbase.comURLOut of Scope00:40
Addedhttps://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaadOTHERIn Scope00:40
Added*.base.orgWILDCARDIn Scope00:40
Addedapi.custody.coinbase.comURLIn Scope00:40
Addedtagomi.comURLOut of Scope00:40
Addedprime.coinbase.comURLIn Scope00:40
Addedcloud.coinbase.comURLIn Scope00:40
Addedcom.coinbase.walliteANDROIDIn Scope00:40
Addedhttps://base.orgBLOCKCHAINIn Scope00:40
Addedcoinbase waas (wallet as a service)OTHERIn Scope00:40
Addedengineering.coinbase.comURLOut of Scope00:40
Addedpro.coinbase.comURLIn Scope00:40
Addedapi.coinbase.comURLIn Scope00:40
Addedparadex.ioURLOut of Scope00:40
Addedsupport.pro.coinbase.comURLOut of Scope00:40
Added*.blockspring.comWILDCARDOut of Scope00:40
Addedcoinbase.comURLIn Scope00:40
Addedhttps://github.com/coinbase/cb-mpcCODEIn Scope00:40
Added54.175.255.192/27CIDRIn Scope00:40
AddedotherOTHERIn Scope00:40
Addedorg.toshiANDROIDIn Scope00:40
Addedinstitutional.coinbase.comURLIn Scope00:40
Addedblog.coinbase.comURLOut of Scope00:40
Addedcom.coinbase.proIOSOut of Scope00:40
Added*.coinbase.comWILDCARDIn Scope00:40
Addedcom.coinbase.androidANDROIDIn Scope00:40
Addedn/a - not coinbase owned or operatedOTHEROut of Scope00:40
Added*.cbhq.netWILDCARDIn Scope00:40
Addedweb3 smart contractsOTHERIn Scope00:40
Addedinternational.coinbase.comURLIn Scope00:40
Addednft.coinbase.comURLIn Scope00:40
Addedcom.vilcsak.bitcoin2IOSIn Scope00:40
Addeddevelopers.coinbase.comURLOut of Scope00:40
Addedstatus.coinbase.comURLOut of Scope00:40
Addedcom.coinbase.proANDROIDOut of Scope00:40
Addedorg.toshi.distributionIOSIn Scope00:40
Addedhttp://coinbase.comURLIn Scope00:40
Added*.coinbase-corp.comWILDCARDIn Scope00:40
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removed*.coinbase.comURLIn Scope21:38
Removed*.cbhq.netURLIn Scope21:38
Removedcom.coinbase.androidANDROIDIn Scope21:38
Removed54.175.255.192/27CIDRIn Scope21:38
Removedpro.coinbase.comURLIn Scope21:38
Removedcustody.coinbase.comURLIn Scope21:38
Removedcommerce.coinbase.comURLIn Scope21:38
Removedprime.coinbase.comURLIn Scope21:38
RemovedotherOTHERIn Scope21:38
Removedorg.toshi.distributionIOSIn Scope21:38
Removedinstitutional.coinbase.comURLIn Scope21:38
Removedapi.coinbase.comURLIn Scope21:38
Removedhttps://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaadOTHERIn Scope21:38
Removed*.base.orgOTHERIn Scope21:38
Removedcloud.coinbase.comURLIn Scope21:38
Removedcom.coinbase.walliteANDROIDIn Scope21:38
Removedapi.custody.coinbase.comURLIn Scope21:38
Removedhttps://base.orgBLOCKCHAINIn Scope21:38
Removedweb3 smart contractsOTHERIn Scope21:38
Removedcoinbase.comURLIn Scope21:38
Removedhttp://coinbase.comURLIn Scope21:38
Removedinternational.coinbase.comURLIn Scope21:38
Removednft.coinbase.comURLIn Scope21:38
Removedcoinbase waas (wallet as a service)OTHERIn Scope21:38
Removedhttps://github.com/coinbase/cb-mpcCODEIn Scope21:38
Removed*.coinbase-corp.comWILDCARDIn Scope21:38
Removedcom.vilcsak.bitcoin2IOSIn Scope21:38
Removedorg.toshiANDROIDIn Scope21:38