metamask

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (16)

Asset	Category	Bounty	Quick Links
*.api.cx.metamask.io	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
MetaMask Browser Extension	OTHER	Yes	-
MetaMask SDK	OTHER	Yes	-
Snaps	OTHER	Yes	-
Third Party Snaps	OTHER	No	-
api-wallet.web3auth.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://*.metamask.io	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://github.com/Web3Auth/web3auth-web	CODE	Yes	-
https://metamask.github.io/phishing-warning/<vX.Y.Z>	OTHER	Yes	-
io.metamask	ANDROID	Yes	Play Store APKPure APKMirror
io.metamask.Metamask	IOS	Yes	-
mUSD Stablecoin	OTHER	Yes	-
metamask.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
signature-insights.api.cx.metamask.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
snaps.metamask.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
wallet.web3auth.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (19)

Asset	Category	Bounty
Core Tier Assets	OTHER	No
Message signing snap	OTHER	No
Metamask Flask Extension	OTHER	No
Non-Core Tier Assets	OTHER	No
Snaps Development Packages	CODE	No
Wallet Tier Assets	OTHER	No
api-dashboard.web3auth.io	URL	No
card.metamask.io	URL	No
community.metamask.io	URL	No
dashboard.web3auth.io	URL	No
developer.metamask.io	URL	No
https://metamask.github.io/	OTHER	No
https://mmi-support.metamask.io/	URL	No
https://support.metamask.io/	URL	No
https://user-storage.api.cx.metamask.io	URL	No
https://www.npmjs.com/search?q=%40metamask	OTHER	No
permissionless.snaps.metamask.io	URL	No
portfolio.metamask.io	URL	No
travel.metamask.io	URL	No

Scope Changes (141)

Mar 6, 2026

Change	Asset	Category	Scope	Time
Removed	https://user-storage.api.cx.metamask.io	URL	Out of Scope	13:40
Removed	message signing snap	OTHER	Out of Scope	13:40
Removed	developer.metamask.io	URL	Out of Scope	13:40
Removed	dashboard.web3auth.io	URL	Out of Scope	13:40
Removed	api-dashboard.web3auth.io	URL	Out of Scope	13:40
Removed	portfolio.metamask.io	URL	Out of Scope	13:40
Removed	snaps development packages	CODE	Out of Scope	13:40
Removed	core tier assets	OTHER	Out of Scope	13:40
Removed	non-core tier assets	OTHER	Out of Scope	13:40

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	third party snaps	OTHER	Out of Scope	19:16
Added	https://github.com/Web3Auth/web3auth-web	CODE	In Scope	19:16
Added	snaps	OTHER	In Scope	19:16
Added	io.metamask	ANDROID	In Scope	19:16
Added	musd stablecoin	OTHER	Out of Scope	19:16
Added	api-wallet.web3auth.io	URL	In Scope	19:16
Added	https://metamask.github.io/	OTHER	Out of Scope	19:16
Added	non-core tier assets	WILDCARD	Out of Scope	19:16
Added	non-core tier assets	WILDCARD	Out of Scope	19:16
Added	non-core tier assets	WILDCARD	Out of Scope	19:16
Added	https://www.npmjs.com/search?q=%40metamask	OTHER	Out of Scope	19:16
Added	metamask flask extension	OTHER	Out of Scope	19:16
Added	metamask flask extension	OTHER	Out of Scope	19:16
Added	*.metamask.io	WILDCARD	In Scope	19:16
Added	api-dashboard.web3auth.io	URL	In Scope	19:16
Added	wallet.web3auth.io	URL	In Scope	19:16
Added	https://support.metamask.io/	URL	Out of Scope	19:16
Added	card.metamask.io	URL	Out of Scope	19:16
Added	portfolio.metamask.io	URL	In Scope	19:16
Added	*.api.cx.metamask.io	WILDCARD	In Scope	19:16
Added	message signing snap	OTHER	In Scope	19:16
Added	metamask sdk	OTHER	In Scope	19:16
Added	metamask.io	URL	In Scope	19:16
Added	io.metamask.metamask	IOS	In Scope	19:16
Added	dashboard.web3auth.io	URL	In Scope	19:16
Added	community.metamask.io	URL	Out of Scope	19:16
Added	permissionless.snaps.metamask.io	URL	Out of Scope	19:16
Added	signature-insights.api.cx.metamask.io	URL	In Scope	19:16
Added	https://mmi-support.metamask.io/	URL	Out of Scope	19:16
Added	metamask browser extension	OTHER	In Scope	19:16
Added	developer.metamask.io	URL	In Scope	19:16
Added	https://user-storage.api.cx.metamask.io	URL	In Scope	19:16
Added	snaps.metamask.io	URL	In Scope	19:16
Added	travel.metamask.io	URL	Out of Scope	19:16
Added	https://metamask.github.io/phishing-warning/%3CvX.Y.Z%3E	OTHER	In Scope	19:16
Added	snaps development packages	CODE	In Scope	19:16
Added	wallet tier assets	OTHER	Out of Scope	19:16
Added	wallet tier assets	OTHER	Out of Scope	19:16
Added	wallet tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16
Added	core tier assets	OTHER	Out of Scope	19:16

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	wallet.web3auth.io	URL	In Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	core tier assets	OTHER	Out of Scope	00:45
Added	non-core tier assets	WILDCARD	Out of Scope	00:45
Added	non-core tier assets	WILDCARD	Out of Scope	00:45
Added	non-core tier assets	WILDCARD	Out of Scope	00:45
Added	message signing snap	OTHER	In Scope	00:45
Added	api-dashboard.web3auth.io	URL	In Scope	00:45
Added	api-wallet.web3auth.io	URL	In Scope	00:45
Added	permissionless.snaps.metamask.io	URL	Out of Scope	00:45
Added	wallet tier assets	OTHER	Out of Scope	00:45
Added	wallet tier assets	OTHER	Out of Scope	00:45
Added	wallet tier assets	OTHER	Out of Scope	00:45
Added	travel.metamask.io	URL	Out of Scope	00:45
Added	metamask sdk	OTHER	In Scope	00:45
Added	third party snaps	OTHER	Out of Scope	00:45
Added	developer.metamask.io	URL	In Scope	00:45
Added	https://metamask.github.io/	OTHER	Out of Scope	00:45
Added	signature-insights.api.cx.metamask.io	URL	In Scope	00:45
Added	metamask.io	URL	In Scope	00:45
Added	metamask browser extension	OTHER	In Scope	00:45
Added	community.metamask.io	URL	Out of Scope	00:45
Added	portfolio.metamask.io	URL	In Scope	00:45
Added	https://metamask.github.io/phishing-warning/%3CvX.Y.Z%3E	OTHER	In Scope	00:45
Added	io.metamask.metamask	IOS	In Scope	00:45
Added	musd stablecoin	OTHER	In Scope	00:45
Added	dashboard.web3auth.io	URL	In Scope	00:45
Added	https://github.com/Web3Auth/web3auth-web	CODE	In Scope	00:45
Added	https://www.npmjs.com/search?q=%40metamask	OTHER	Out of Scope	00:45
Added	snaps development packages	CODE	In Scope	00:45
Added	snaps development packages	CODE	In Scope	00:45
Added	snaps development packages	CODE	In Scope	00:45
Added	snaps development packages	CODE	In Scope	00:45
Added	snaps development packages	CODE	In Scope	00:45
Added	snaps development packages	CODE	In Scope	00:45
Added	https://user-storage.api.cx.metamask.io	URL	In Scope	00:45
Added	io.metamask	ANDROID	In Scope	00:45
Added	card.metamask.io	URL	Out of Scope	00:45
Added	snaps	OTHER	In Scope	00:45
Added	*.metamask.io	WILDCARD	In Scope	00:45
Added	*.api.cx.metamask.io	WILDCARD	In Scope	00:45
Added	https://support.metamask.io/	URL	Out of Scope	00:45
Added	metamask flask extension	OTHER	Out of Scope	00:45
Added	metamask flask extension	OTHER	Out of Scope	00:45
Added	snaps.metamask.io	URL	In Scope	00:45
Added	https://mmi-support.metamask.io/	URL	Out of Scope	00:45

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	api-wallet.web3auth.io	URL	In Scope	21:38
Removed	wallet.web3auth.io	URL	In Scope	21:38
Removed	https://github.com/Web3Auth/web3auth-web	CODE	In Scope	21:38
Removed	api-dashboard.web3auth.io	URL	In Scope	21:38
Removed	dashboard.web3auth.io	URL	In Scope	21:38
Removed	musd stablecoin	OTHER	In Scope	21:38
Removed	metamask browser extension	OTHER	In Scope	21:38
Removed	io.metamask.metamask	IOS	In Scope	21:38
Removed	io.metamask	ANDROID	In Scope	21:38
Removed	metamask.io	URL	In Scope	21:38
Removed	signature-insights.api.cx.metamask.io	URL	In Scope	21:38
Removed	developer.metamask.io	URL	In Scope	21:38
Removed	message signing snap	OTHER	In Scope	21:38
Removed	https://user-storage.api.cx.metamask.io	URL	In Scope	21:38
Removed	*.api.cx.metamask.io	WILDCARD	In Scope	21:38
Removed	*.metamask.io	WILDCARD	In Scope	21:38
Removed	snaps development packages	CODE	In Scope	21:38
Removed	snaps.metamask.io	URL	In Scope	21:38
Removed	snaps	OTHER	In Scope	21:38
Removed	https://metamask.github.io/phishing-warning/%3CvX.Y.Z%3E	OTHER	In Scope	21:38
Removed	portfolio.metamask.io	URL	In Scope	21:38
Removed	metamask sdk	OTHER	In Scope	21:38
Added	third party snaps	OTHER	In Scope	19:12