metamask

HackerOneView on HackerOne
RawAI Enhanced
23
In Scope
12
Out of Scope

In-Scope Assets (23)

AssetCategoryBountyQuick Links
*.api.cx.metamask.ioWILDCARDYes
Message signing snapOTHERYes-
MetaMask Browser ExtensionOTHERYes-
MetaMask SDKOTHERYes-
SnapsOTHERYes-
Snaps Development PackagesCODEYes-
Third Party SnapsOTHERNo-
api-dashboard.web3auth.ioURLYes
api-wallet.web3auth.ioURLYes
dashboard.web3auth.ioURLYes
developer.metamask.ioURLYes
https://*.metamask.ioWILDCARDYes
https://github.com/Web3Auth/web3auth-webCODEYes-
https://metamask.github.io/phishing-warning/<vX.Y.Z>OTHERYes-
https://user-storage.api.cx.metamask.ioURLYes
io.metamaskANDROIDYes
io.metamask.MetamaskIOSYes-
mUSD StablecoinOTHERYes-
metamask.ioURLYes
portfolio.metamask.ioURLYes
signature-insights.api.cx.metamask.ioURLYes
snaps.metamask.ioURLYes
wallet.web3auth.ioURLYes
Out-of-Scope Assets (12)
AssetCategoryBounty
Core Tier AssetsOTHERNo
Metamask Flask ExtensionOTHERNo
Non-Core Tier AssetsOTHERNo
Wallet Tier AssetsOTHERNo
card.metamask.ioURLNo
community.metamask.ioURLNo
https://metamask.github.io/OTHERNo
https://mmi-support.metamask.io/URLNo
https://support.metamask.io/URLNo
https://www.npmjs.com/search?q=%40metamaskOTHERNo
permissionless.snaps.metamask.ioURLNo
travel.metamask.ioURLNo