exodus

HackerOneView on HackerOne
RawAI Enhanced
27
In Scope
33
Out of Scope
In-Scope Assets (27)
AssetCategoryBountyQuick Links
*.a.exodus.ioWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.exodus.comWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.exodus.ioWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Exodus Desktop WalletBINARYYes-
Smart Contract: Solana - EQYRmLmkE7G7a2WQyojwrXg4SeguypCdnbm3ecncizsdOTHERYes-
Smart Contract: Solana mainnet - xoUSDq85Rjsb6SbUwJyreFgeWQvxdkT7R3c3g7s6p5YOTHERYes-
ctr.a.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
exodus-movement.exodusIOSYes-
fiat-p.a.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
fiat-prod-fallback.a.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
fiat.a.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://apps.apple.com/us/app/exodus-crypto-bitcoin-wallet/id1414384820IOSYes-
https://github.com/ExodusOSS/bytesCODEYes-
https://github.com/ExodusOSS/cryptoCODEYes-
https://github.com/ExodusOSS/hydraCODEYes-
https://play.google.com/store/apps/details?id=exodusmovement.exodus&hl=en_INANDROIDYes
Play StoreAPKPureAPKMirror
https://www.npmjs.com/package/@exodus/errorsCODEYes-
https://www.npmjs.com/package/@exodus/keychainCODEYes-
https://www.npmjs.com/package/@exodus/safe-stringCODEYes-
https://www.npmjs.com/package/@exodus/sentry-clientCODEYes-
kyc.a.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
login.exodus.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
nexotrack-p.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
nexotrack.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
pay-admin.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
pay.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
turing.exodus.ioURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (33)
AssetCategoryBounty
*.atp-exodus.comWILDCARDNo
*.grateful.meWILDCARDNo
Exodus Browser ExtensionBINARYNo
Passkey WalletOTHERNo
api-p.xoswap.comURLNo
api.passkeys.networkURLNo
api.xoswap.comURLNo
dashboard-p.xoswap.comURLNo
dashboard.xoswap.comURLNo
embedded.passkeys.foundationURLNo
exchange-p.exodus.ioURLNo
exchange-server-p.exodus.ioURLNo
exchange-server.exodus.ioURLNo
exodus.atlassian.netURLNo
exodusstore.blob.core.windows.netURLNo
get.exodus.*WILDCARDNo
http://exchange-server.exodus.ioURLNo
http://exodus.com/keybase.txtURLNo
http://www.exodus.com/contact-supportURLNo
https://apps.apple.com/us/app/grateful-by-exodus/id6754093889IOSNo
https://exodus.atlassian.netURLNo
https://play.google.com/store/apps/details?id=com.exodus.gratefulANDROIDNo
my.passkeys.networkURLNo
passkeys.foundationURLNo
relay.passkeys.foundationURLNo
safeguard.a.exodus.ioURLNo
slack-invite.exodus.comURLNo
support-helpers.a.exodus.ioURLNo
support.exodus.comURLNo
wallet.passkeys.foundationURLNo
www.exodus.com/job-application/*WILDCARDNo
xoswap-graphql-p.a.exodus.ioURLNo
xoswap-graphql.a.exodus.ioURLNo
Scope Changes (155)
Aug 10, 2026
ChangeAssetCategoryScopeTime
Added*.grateful.meWILDCARDOut of Scope14:50
Added*.grateful.meWILDCARDOut of Scope14:50
Removedhttps://play.google.com/store/apps/details?id=com.exodus.gratefulANDROIDOut of Scope14:50
Removedhttps://apps.apple.com/us/app/grateful-by-exodus/id6754093889IOSOut of Scope14:50
Removedapi.passkeys.networkURLOut of Scope08:50
Removedembedded.passkeys.foundationURLOut of Scope08:50
Removedrelay.passkeys.foundationURLOut of Scope08:50
Removedmy.passkeys.networkURLOut of Scope08:50
Removedpasskey walletOTHEROut of Scope08:50
Removedpasskeys.foundationURLOut of Scope08:50
Removedwallet.passkeys.foundationURLOut of Scope08:50
Aug 5, 2026
ChangeAssetCategoryScopeTime
Removedxoswap-graphql.a.exodus.ioURLOut of Scope21:50
Removedxoswap-graphql-p.a.exodus.ioURLOut of Scope21:50
Removedexchange-p.exodus.ioURLOut of Scope17:50
Removedapi.xoswap.comURLOut of Scope17:50
Removedapi-p.xoswap.comURLOut of Scope17:50
Removeddashboard.xoswap.comURLOut of Scope17:50
Removeddashboard-p.xoswap.comURLOut of Scope17:50
Removedexchange-server.exodus.ioURLOut of Scope17:50
Removedexchange-server-p.exodus.ioURLOut of Scope17:50
Removedhttp://exchange-server.exodus.ioURLOut of Scope17:50
Addedsmart contract: solana - eqyrmlmke7g7a2wqyojwrxg4seguypcdnbm3ecncizsdBLOCKCHAINIn Scope13:50
Addedsmart contract: solana mainnet - xousdq85rjsb6sbuwjyrefgewqvxdkt7r3c3g7s6p5yBLOCKCHAINIn Scope13:50
Addedsmart contract: solana mainnet - xousdq85rjsb6sbuwjyrefgewqvxdkt7r3c3g7s6p5yOTHERIn Scope13:50
Addedsmart contract: solana - eqyrmlmke7g7a2wqyojwrxg4seguypcdnbm3ecncizsdOTHERIn Scope13:50
Addedhttps://www.npmjs.com/package/@exodus/errorsCODEIn Scope12:50
Addedhttps://github.com/ExodusOSS/cryptoCODEIn Scope12:50
Addedhttps://github.com/ExodusOSS/bytesCODEIn Scope12:50
Addedhttps://github.com/ExodusOSS/hydraCODEIn Scope12:50
Addedhttps://www.npmjs.com/package/@exodus/keychainCODEIn Scope12:50
Addedhttps://www.npmjs.com/package/@exodus/sentry-clientCODEIn Scope12:50
Addedhttps://www.npmjs.com/package/@exodus/errorsCODEIn Scope12:50
Addedhttps://www.npmjs.com/package/@exodus/safe-stringCODEIn Scope12:50
Addedhttps://www.npmjs.com/package/@exodus/keychainCODEIn Scope12:50
Addedhttps://github.com/ExodusOSS/bytesCODEIn Scope12:50
Addedhttps://www.npmjs.com/package/@exodus/sentry-clientCODEIn Scope12:50
Addedhttps://github.com/ExodusOSS/cryptoCODEIn Scope12:50
Addedhttps://www.npmjs.com/package/@exodus/safe-stringCODEIn Scope12:50
Addedhttps://github.com/ExodusOSS/hydraCODEIn Scope12:50
Aug 3, 2026
ChangeAssetCategoryScopeTime
Addeddashboard-p.xoswap.comURLIn Scope19:50
Addedkyc.a.exodus.ioURLIn Scope19:50
Addedxoswap-graphql-p.a.exodus.ioURLIn Scope19:50
Addedfiat-prod-fallback.a.exodus.ioURLIn Scope19:50
Addedhttp://exchange-server.exodus.ioURLIn Scope19:50
Addedapi-p.xoswap.comURLIn Scope19:50
Addednexotrack-p.exodus.ioURLIn Scope19:50
Addedexchange-server-p.exodus.ioURLIn Scope19:50
Addedfiat.a.exodus.ioURLIn Scope19:50
Addednexotrack.exodus.ioURLIn Scope19:50
Addedexchange-server.exodus.ioURLIn Scope19:50
Addedfiat-p.a.exodus.ioURLIn Scope19:50
Addeddashboard.xoswap.comURLIn Scope19:50
Addedctr.a.exodus.ioURLIn Scope19:50
Addedxoswap-graphql.a.exodus.ioURLIn Scope19:50
Addedapi-p.xoswap.comURLIn Scope19:50
Addedapi.xoswap.comURLIn Scope19:50
Addedxoswap-graphql-p.a.exodus.ioURLIn Scope19:50
Addedexchange-p.exodus.ioURLIn Scope19:50
Addedexchange-server-p.exodus.ioURLIn Scope19:50
Addedhttp://exchange-server.exodus.ioURLIn Scope19:50
Addeddashboard.xoswap.comURLIn Scope19:50
Addeddashboard-p.xoswap.comURLIn Scope19:50
Addednexotrack.exodus.ioURLIn Scope19:50
Addednexotrack-p.exodus.ioURLIn Scope19:50
Addedctr.a.exodus.ioURLIn Scope19:50
Addedexchange-server.exodus.ioURLIn Scope19:50
Addedfiat.a.exodus.ioURLIn Scope19:50
Addedfiat-p.a.exodus.ioURLIn Scope19:50
Addedfiat-prod-fallback.a.exodus.ioURLIn Scope19:50
Addedkyc.a.exodus.ioURLIn Scope19:50
Addedexchange-p.exodus.ioURLIn Scope19:50
Addedapi.xoswap.comURLIn Scope19:50
Addedxoswap-graphql.a.exodus.ioURLIn Scope19:50
Addedapi.passkeys.networkURLIn Scope18:50
Addedlogin.exodus.comURLIn Scope18:50
Addedpay-admin.exodus.ioURLIn Scope18:50
Addedturing.exodus.ioURLIn Scope18:50
Addedpasskeys.foundationURLIn Scope18:50
Addedwallet.passkeys.foundationURLIn Scope18:50
Addedrelay.passkeys.foundationURLIn Scope18:50
Addedmy.passkeys.networkURLIn Scope18:50
Addedapi.passkeys.networkURLIn Scope18:50
Addedembedded.passkeys.foundationURLIn Scope18:50
Addedwallet.passkeys.foundationURLIn Scope18:50
Addedembedded.passkeys.foundationURLIn Scope18:50
Addedlogin.exodus.comURLIn Scope18:50
Addedrelay.passkeys.foundationURLIn Scope18:50
Addedpasskeys.foundationURLIn Scope18:50
Addedturing.exodus.ioURLIn Scope18:50
Addedmy.passkeys.networkURLIn Scope18:50
Addedpay-admin.exodus.ioURLIn Scope18:50
Addedpay.exodus.ioURLIn Scope15:50
Addedpay.exodus.ioURLIn Scope15:50
May 14, 2026
ChangeAssetCategoryScopeTime
Removed*.grateful.meWILDCARDIn Scope06:26
Mar 2, 2026
ChangeAssetCategoryScopeTime
Addedsafeguard.a.exodus.ioURLOut of Scope06:46
Addedsafeguard.a.exodus.ioURLOut of Scope06:46
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedhttp://www.exodus.com/contact-supportURLOut of Scope19:11
Added*.exodus.ioWILDCARDIn Scope19:11
Added*.a.exodus.ioWILDCARDIn Scope19:11
Addedhttps://play.google.com/store/apps/details?id=exodusmovement.exodus&hl=en_INANDROIDIn Scope19:11
Addedsupport.exodus.comURLOut of Scope19:11
Addedwww.exodus.com/job-application/*WILDCARDOut of Scope19:11
Addedslack-invite.exodus.comURLOut of Scope19:11
Addedexodus.atlassian.netURLOut of Scope19:11
Added*.exodus.comWILDCARDIn Scope19:11
Addedhttps://apps.apple.com/us/app/exodus-crypto-bitcoin-wallet/id1414384820IOSIn Scope19:11
Addedsupport-helpers.a.exodus.ioURLOut of Scope19:11
Addedhttps://exodus.atlassian.netURLOut of Scope19:11
Addedexodus-movement.exodusIOSIn Scope19:11
Addedexodus desktop walletOTHERIn Scope19:11
Addedpasskey walletOTHERIn Scope19:11
Addedexodusstore.blob.core.windows.netURLOut of Scope19:11
Addedget.exodus.*WILDCARDOut of Scope19:11
Addedhttp://exodus.com/keybase.txtURLOut of Scope19:11
Added*.atp-exodus.comWILDCARDOut of Scope19:11
Addedexodus browser extensionBINARYOut of Scope19:11
Addedhttps://play.google.com/store/apps/details?id=com.exodus.gratefulANDROIDIn Scope19:11
Addedhttps://apps.apple.com/us/app/grateful-by-exodus/id6754093889IOSIn Scope19:11
Added*.grateful.meWILDCARDIn Scope19:11
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedhttp://exodus.com/keybase.txtURLOut of Scope00:42
Added*.atp-exodus.comWILDCARDOut of Scope00:42
Added*.a.exodus.ioWILDCARDIn Scope00:42
Added*.exodus.comWILDCARDIn Scope00:42
Addedhttps://apps.apple.com/us/app/grateful-by-exodus/id6754093889IOSIn Scope00:42
Added*.grateful.meWILDCARDIn Scope00:42
Addedget.exodus.*WILDCARDOut of Scope00:42
Addedwww.exodus.com/job-application/*WILDCARDOut of Scope00:42
Addedhttps://exodus.atlassian.netURLOut of Scope00:42
Addedhttps://apps.apple.com/us/app/exodus-crypto-bitcoin-wallet/id1414384820IOSIn Scope00:42
Addedhttps://play.google.com/store/apps/details?id=com.exodus.gratefulANDROIDIn Scope00:42
Addedhttp://www.exodus.com/contact-supportURLOut of Scope00:42
Addedsupport-helpers.a.exodus.ioURLOut of Scope00:42
Addedslack-invite.exodus.comURLOut of Scope00:42
Addedexodus browser extensionOTHEROut of Scope00:42
Addedexodus.atlassian.netURLOut of Scope00:42
Addedpasskey walletURLIn Scope00:42
Addedpasskey walletURLIn Scope00:42
Addedpasskey walletURLIn Scope00:42
Addedhttps://play.google.com/store/apps/details?id=exodusmovement.exodus&hl=en_INANDROIDIn Scope00:42
Addedsupport.exodus.comURLOut of Scope00:42
Added*.exodus.ioWILDCARDIn Scope00:42
Addedexodus-movement.exodusIOSIn Scope00:42
Addedexodus desktop walletOTHERIn Scope00:42
Addedexodusstore.blob.core.windows.netURLOut of Scope00:42
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removed*.exodus.ioWILDCARDIn Scope21:38
Removed*.a.exodus.ioWILDCARDIn Scope21:38
Removedexodus-movement.exodusIOSIn Scope21:38
Removedexodus desktop walletBINARYIn Scope21:38
Removed*.exodus.comWILDCARDIn Scope21:38
Removedpasskey walletOTHERIn Scope21:38
Removedhttps://apps.apple.com/us/app/exodus-crypto-bitcoin-wallet/id1414384820IOSIn Scope21:38
Removedhttps://play.google.com/store/apps/details?id=exodusmovement.exodus&hl=en_INANDROIDIn Scope21:38
Removedhttps://play.google.com/store/apps/details?id=com.exodus.gratefulANDROIDIn Scope21:38
Removedhttps://apps.apple.com/us/app/grateful-by-exodus/id6754093889IOSIn Scope21:38
Removed*.grateful.meWILDCARDIn Scope21:38