coinbase

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (29)

Asset	Category	Bounty	Quick Links
*.base.org	OTHER	Yes	-
*.cbhq.net	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.coinbase-corp.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
54.175.255.192/27	CIDR	Yes	Shodan Censys BGP HE
Coinbase WaaS (Wallet as a Service)	OTHER	Yes	-
Other	OTHER	Yes	-
Web3 Smart Contracts	OTHER	Yes	-
api.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
api.custody.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
cloud.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
com.coinbase.android	ANDROID	Yes	Play Store APKPure APKMirror
com.coinbase.wallite	ANDROID	Yes	Play Store APKPure APKMirror
com.vilcsak.bitcoin2	IOS	Yes	-
commerce.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
custody.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
http://coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://base.org	BLOCKCHAIN	Yes	-
https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad	OTHER	Yes	-
https://github.com/coinbase/cb-mpc	CODE	Yes	-
https://github.com/coinbase/cb-mpc-go	CODE	No	-
institutional.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
international.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
nft.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
org.toshi	ANDROID	Yes	Play Store APKPure APKMirror
org.toshi.distribution	IOS	Yes	-
prime.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
pro.coinbase.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (12)

Asset	Category	Bounty
*.blockspring.com	URL	No
N/A - Not Coinbase owned or operated	OTHER	No
blog.coinbase.com	URL	No
com.coinbase.pro	IOS	No
com.coinbase.pro	ANDROID	No
developers.coinbase.com	URL	No
engineering.coinbase.com	URL	No
paradex.io	URL	No
status.coinbase.com	URL	No
support.coinbase.com	URL	No
support.pro.coinbase.com	URL	No
tagomi.com	URL	No

Scope Changes (110)

Mar 26, 2026

Change	Asset	Category	Scope	Time
Added	https://github.com/coinbase/cb-mpc-go	CODE	In Scope	18:21
Added	https://github.com/coinbase/cb-mpc-go	CODE	Out of Scope	18:21

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	pro.coinbase.com	URL	In Scope	19:08
Added	coinbase.com	URL	In Scope	19:08
Added	nft.coinbase.com	URL	In Scope	19:08
Added	coinbase waas (wallet as a service)	OTHER	In Scope	19:08
Added	status.coinbase.com	URL	Out of Scope	19:08
Added	*.blockspring.com	WILDCARD	Out of Scope	19:08
Added	*.cbhq.net	WILDCARD	In Scope	19:08
Added	custody.coinbase.com	URL	In Scope	19:08
Added	https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad	OTHER	In Scope	19:08
Added	*.base.org	WILDCARD	In Scope	19:08
Added	international.coinbase.com	URL	In Scope	19:08
Added	*.coinbase-corp.com	WILDCARD	In Scope	19:08
Added	support.pro.coinbase.com	URL	Out of Scope	19:08
Added	commerce.coinbase.com	URL	In Scope	19:08
Added	com.vilcsak.bitcoin2	IOS	In Scope	19:08
Added	support.coinbase.com	URL	Out of Scope	19:08
Added	engineering.coinbase.com	URL	Out of Scope	19:08
Added	com.coinbase.android	ANDROID	In Scope	19:08
Added	org.toshi.distribution	IOS	In Scope	19:08
Added	api.coinbase.com	URL	In Scope	19:08
Added	cloud.coinbase.com	URL	In Scope	19:08
Added	com.coinbase.wallite	ANDROID	In Scope	19:08
Added	api.custody.coinbase.com	URL	In Scope	19:08
Added	https://github.com/coinbase/cb-mpc	CODE	In Scope	19:08
Added	developers.coinbase.com	URL	Out of Scope	19:08
Added	other	OTHER	In Scope	19:08
Added	institutional.coinbase.com	URL	In Scope	19:08
Added	blog.coinbase.com	URL	Out of Scope	19:08
Added	n/a - not coinbase owned or operated	OTHER	Out of Scope	19:08
Added	tagomi.com	URL	Out of Scope	19:08
Added	*.coinbase.com	WILDCARD	In Scope	19:08
Added	org.toshi	ANDROID	In Scope	19:08
Added	https://base.org	URL	In Scope	19:08
Added	web3 smart contracts	OTHER	In Scope	19:08
Added	http://coinbase.com	URL	In Scope	19:08
Added	54.175.255.192/27	CIDR	In Scope	19:08
Added	prime.coinbase.com	URL	In Scope	19:08
Added	com.coinbase.pro	IOS	Out of Scope	19:08
Added	paradex.io	URL	Out of Scope	19:08
Added	com.coinbase.pro	ANDROID	Out of Scope	19:08

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	*.coinbase-corp.com	WILDCARD	In Scope	00:40
Added	coinbase waas (wallet as a service)	OTHER	In Scope	00:40
Added	engineering.coinbase.com	URL	Out of Scope	00:40
Added	pro.coinbase.com	URL	In Scope	00:40
Added	api.coinbase.com	URL	In Scope	00:40
Added	paradex.io	URL	Out of Scope	00:40
Added	support.pro.coinbase.com	URL	Out of Scope	00:40
Added	*.blockspring.com	WILDCARD	Out of Scope	00:40
Added	coinbase.com	URL	In Scope	00:40
Added	https://github.com/coinbase/cb-mpc	CODE	In Scope	00:40
Added	54.175.255.192/27	CIDR	In Scope	00:40
Added	other	OTHER	In Scope	00:40
Added	org.toshi	ANDROID	In Scope	00:40
Added	institutional.coinbase.com	URL	In Scope	00:40
Added	blog.coinbase.com	URL	Out of Scope	00:40
Added	com.coinbase.pro	IOS	Out of Scope	00:40
Added	*.coinbase.com	WILDCARD	In Scope	00:40
Added	com.coinbase.android	ANDROID	In Scope	00:40
Added	n/a - not coinbase owned or operated	OTHER	Out of Scope	00:40
Added	*.cbhq.net	WILDCARD	In Scope	00:40
Added	web3 smart contracts	OTHER	In Scope	00:40
Added	international.coinbase.com	URL	In Scope	00:40
Added	nft.coinbase.com	URL	In Scope	00:40
Added	com.vilcsak.bitcoin2	IOS	In Scope	00:40
Added	developers.coinbase.com	URL	Out of Scope	00:40
Added	status.coinbase.com	URL	Out of Scope	00:40
Added	com.coinbase.pro	ANDROID	Out of Scope	00:40
Added	org.toshi.distribution	IOS	In Scope	00:40
Added	http://coinbase.com	URL	In Scope	00:40
Added	support.coinbase.com	URL	Out of Scope	00:40
Added	custody.coinbase.com	URL	In Scope	00:40
Added	commerce.coinbase.com	URL	In Scope	00:40
Added	https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad	OTHER	In Scope	00:40
Added	*.base.org	WILDCARD	In Scope	00:40
Added	api.custody.coinbase.com	URL	In Scope	00:40
Added	tagomi.com	URL	Out of Scope	00:40
Added	prime.coinbase.com	URL	In Scope	00:40
Added	cloud.coinbase.com	URL	In Scope	00:40
Added	com.coinbase.wallite	ANDROID	In Scope	00:40
Added	https://base.org	BLOCKCHAIN	In Scope	00:40

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	*.coinbase.com	URL	In Scope	21:38
Removed	*.cbhq.net	URL	In Scope	21:38
Removed	com.coinbase.android	ANDROID	In Scope	21:38
Removed	54.175.255.192/27	CIDR	In Scope	21:38
Removed	pro.coinbase.com	URL	In Scope	21:38
Removed	custody.coinbase.com	URL	In Scope	21:38
Removed	commerce.coinbase.com	URL	In Scope	21:38
Removed	prime.coinbase.com	URL	In Scope	21:38
Removed	other	OTHER	In Scope	21:38
Removed	org.toshi.distribution	IOS	In Scope	21:38
Removed	institutional.coinbase.com	URL	In Scope	21:38
Removed	api.coinbase.com	URL	In Scope	21:38
Removed	https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad	OTHER	In Scope	21:38
Removed	*.base.org	OTHER	In Scope	21:38
Removed	cloud.coinbase.com	URL	In Scope	21:38
Removed	com.coinbase.wallite	ANDROID	In Scope	21:38
Removed	api.custody.coinbase.com	URL	In Scope	21:38
Removed	https://base.org	BLOCKCHAIN	In Scope	21:38
Removed	web3 smart contracts	OTHER	In Scope	21:38
Removed	coinbase.com	URL	In Scope	21:38
Removed	http://coinbase.com	URL	In Scope	21:38
Removed	international.coinbase.com	URL	In Scope	21:38
Removed	nft.coinbase.com	URL	In Scope	21:38
Removed	coinbase waas (wallet as a service)	OTHER	In Scope	21:38
Removed	https://github.com/coinbase/cb-mpc	CODE	In Scope	21:38
Removed	*.coinbase-corp.com	WILDCARD	In Scope	21:38
Removed	com.vilcsak.bitcoin2	IOS	In Scope	21:38
Removed	org.toshi	ANDROID	In Scope	21:38