crypto

HackerOneView on HackerOne
RawAI Enhanced
23
In Scope
4
Out of Scope
In-Scope Assets (23)
AssetCategoryBountyQuick Links
*.crypto.comWILDCARDYes
*.mona.coWILDCARDYes
Crypto.com Exchange APIs that require an accountURLYes-
Crypto.com Wallet ExtensionOTHERYes-
Crypto.com mobile app APIs that require an accountURLYes-
app.mona.coURLYes
co.mona.androidANDROIDYes
com.defi.walletANDROIDYes
com.defi.walletIOSYes-
com.monaco.mobileIOSYes-
developer-api.crypto.comURLYes
developer-platform-api.crypto.comURLYes
developer.crypto.comURLYes
https://crypto.com/exchangeURLYes
https://crypto.com/nftURLYes
https://crypto.com/priceURLYes
https://etherscan.io/token/0xfe18ae03741a5b84e39c295ac9c856ed7991c38eBLOCKCHAINYes-
js.crypto.comURLYes
merchant.crypto.comURLYes
nadex.comURLYes
og.comURLYes
tax.crypto.comURLYes
web.crypto.comURLYes
Out-of-Scope Assets (4)
AssetCategoryBounty
https://github.com/crypto-com/chain-desktop-walletCODENo
https://github.com/crypto-com/cro-stakingCODENo
https://github.com/crypto-com/swap-contracts-coreCODENo
https://github.com/crypto-com/swap-contracts-peripheryCODENo
Scope Changes (77)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/crypto-com/chain-desktop-walletCODEOut of Scope19:10
Addedhttps://etherscan.io/token/0xfe18ae03741a5b84e39c295ac9c856ed7991c38eBLOCKCHAINIn Scope19:10
Addednadex.comURLIn Scope19:10
Addedhttps://github.com/crypto-com/swap-contracts-peripheryCODEOut of Scope19:10
Addedhttps://github.com/crypto-com/swap-contracts-coreCODEOut of Scope19:10
Addedcom.defi.walletIOSIn Scope19:10
Addedjs.crypto.comURLIn Scope19:10
Added*.mona.coWILDCARDIn Scope19:10
Addedcrypto.com exchange apis that require an accountOTHERIn Scope19:10
Addedco.mona.androidANDROIDIn Scope19:10
Addedcom.monaco.mobileIOSIn Scope19:10
Addeddeveloper.crypto.comURLIn Scope19:10
Addedhttps://github.com/crypto-com/cro-stakingCODEOut of Scope19:10
Addedhttps://crypto.com/exchangeURLIn Scope19:10
Addedcom.defi.walletANDROIDIn Scope19:10
Addedmerchant.crypto.comURLIn Scope19:10
Addedcrypto.com mobile app apis that require an accountOTHERIn Scope19:10
Addedtax.crypto.comURLIn Scope19:10
Addedweb.crypto.comURLIn Scope19:10
Addeddeveloper-api.crypto.comURLIn Scope19:10
Addedog.comURLIn Scope19:10
Addedapp.mona.coURLIn Scope19:10
Addedcrypto.com wallet extensionOTHERIn Scope19:10
Addedhttps://crypto.com/nftURLIn Scope19:10
Addeddeveloper-platform-api.crypto.comURLIn Scope19:10
Added*.crypto.comWILDCARDIn Scope19:10
Addedhttps://crypto.com/priceURLIn Scope19:10
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedhttps://github.com/crypto-com/chain-desktop-walletCODEOut of Scope00:41
Addedcrypto.com wallet extensionOTHERIn Scope00:41
Addedcrypto.com mobile app apis that require an accountURLIn Scope00:41
Addedtax.crypto.comURLIn Scope00:41
Addedhttps://crypto.com/nftURLIn Scope00:41
Addeddeveloper-platform-api.crypto.comURLIn Scope00:41
Added*.crypto.comWILDCARDIn Scope00:41
Addeddeveloper.crypto.comURLIn Scope00:41
Addedjs.crypto.comURLIn Scope00:41
Addedcrypto.com exchange apis that require an accountURLIn Scope00:41
Addedco.mona.androidANDROIDIn Scope00:41
Addeddeveloper-api.crypto.comURLIn Scope00:41
Addedog.comURLIn Scope00:41
Addedhttps://github.com/crypto-com/cro-stakingCODEOut of Scope00:41
Addedhttps://github.com/crypto-com/swap-contracts-peripheryCODEOut of Scope00:41
Addedhttps://github.com/crypto-com/swap-contracts-coreCODEOut of Scope00:41
Addedhttps://crypto.com/priceURLIn Scope00:41
Addedcom.defi.walletANDROIDIn Scope00:41
Addedmerchant.crypto.comURLIn Scope00:41
Addednadex.comURLIn Scope00:41
Addedapp.mona.coURLIn Scope00:41
Addedcom.defi.walletIOSIn Scope00:41
Added*.mona.coWILDCARDIn Scope00:41
Addedweb.crypto.comURLIn Scope00:41
Addedhttps://etherscan.io/token/0xfe18ae03741a5b84e39c295ac9c856ed7991c38eBLOCKCHAINIn Scope00:41
Addedcom.monaco.mobileIOSIn Scope00:41
Addedhttps://crypto.com/exchangeURLIn Scope00:41
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedhttps://crypto.com/priceURLIn Scope21:38
Removedapp.mona.coURLIn Scope21:38
Removedcom.defi.walletANDROIDIn Scope21:38
Removedcom.defi.walletIOSIn Scope21:38
Removedmerchant.crypto.comURLIn Scope21:38
Removedjs.crypto.comURLIn Scope21:38
Removed*.mona.coWILDCARDIn Scope21:38
Removedcrypto.com wallet extensionOTHERIn Scope21:38
Removedcrypto.com mobile app apis that require an accountURLIn Scope21:38
Removedcrypto.com exchange apis that require an accountURLIn Scope21:38
Removedtax.crypto.comURLIn Scope21:38
Removedhttps://crypto.com/nftURLIn Scope21:38
Removedweb.crypto.comURLIn Scope21:38
Removeddeveloper-platform-api.crypto.comURLIn Scope21:38
Removedhttps://etherscan.io/token/0xfe18ae03741a5b84e39c295ac9c856ed7991c38eBLOCKCHAINIn Scope21:38
Removednadex.comURLIn Scope21:38
Removedco.mona.androidANDROIDIn Scope21:38
Removedcom.monaco.mobileIOSIn Scope21:38
Removedhttps://crypto.com/exchangeURLIn Scope21:38
Removeddeveloper.crypto.comURLIn Scope21:38
Removeddeveloper-api.crypto.comURLIn Scope21:38
Removedog.comURLIn Scope21:38
Removed*.crypto.comWILDCARDIn Scope21:38