moonpay

HackerOneView on HackerOne
RawAI Enhanced
14
In Scope
18
Out of Scope
In-Scope Assets (14)
AssetCategoryBountyQuick Links
*.hypermint.comWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.moonpay.comWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
*.moonpaycloud.comWILDCARDYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
api.moonpay.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
app.moonpay.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
auth.moonpay.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
buy.moonpay.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://apps.apple.com/app/id1635031432IOSYes-
https://github.com/moonpayCODEYes-
https://play.google.com/store/apps/details?id=com.moonpayANDROIDYes
Play StoreAPKPureAPKMirror
hypermint.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
moonpay.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
sell.moonpay.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
web3.moonpay.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (18)
AssetCategoryBounty
*.plexlabs.ioWILDCARDNo
clicks.moonpay.comURLNo
dev.moonpay.comURLNo
docs.hypermint.comURLNo
docs.moonpay.comURLNo
ethpass.xyzURLNo
help.moonpay.comURLNo
https://github.com/moonpay/devops-challengeCODENo
https://github.com/moonpay/moonpay-demo-integrationsCODENo
https://github.com/moonpay/moonpay-signCODENo
page.moonpay.comURLNo
payload-marketing.moonpay.comURLNo
plexlabs.ioURLNo
qr.moonpay.comURLNo
request-headers-no-proxy.moonpay.comURLNo
request-headers.moonpay.comURLNo
storefront.hypermint.comURLNo
support.moonpay.comURLNo
Scope Changes (78)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedclicks.moonpay.comURLOut of Scope19:15
Addedhttps://github.com/moonpayCODEOut of Scope19:15
Addedapi.moonpay.comURLIn Scope19:15
Addeddocs.moonpay.comURLOut of Scope19:15
Addedplexlabs.ioURLOut of Scope19:15
Addedrequest-headers-no-proxy.moonpay.comURLOut of Scope19:15
Addeddocs.hypermint.comURLOut of Scope19:15
Addedpayload-marketing.moonpay.comURLOut of Scope19:15
Addedhttps://play.google.com/store/apps/details?id=com.moonpayANDROIDIn Scope19:15
Addedpage.moonpay.comURLOut of Scope19:15
Addedrequest-headers.moonpay.comURLOut of Scope19:15
Addedstorefront.hypermint.comURLOut of Scope19:15
Added*.moonpay.comWILDCARDIn Scope19:15
Addedhttps://github.com/moonpay/moonpay-signOTHEROut of Scope19:15
Addedweb3.moonpay.comURLIn Scope19:15
Addedbuy.moonpay.comURLIn Scope19:15
Addedmoonpay.comURLIn Scope19:15
Addedsupport.moonpay.comURLOut of Scope19:15
Added*.plexlabs.ioWILDCARDOut of Scope19:15
Addeddev.moonpay.comURLOut of Scope19:15
Addedhypermint.comURLIn Scope19:15
Added*.moonpaycloud.comWILDCARDIn Scope19:15
Addedhttps://github.com/moonpay/devops-challengeOTHEROut of Scope19:15
Added*.hypermint.comWILDCARDIn Scope19:15
Addedsell.moonpay.comURLIn Scope19:15
Addedapp.moonpay.comURLIn Scope19:15
Addedhelp.moonpay.comURLOut of Scope19:15
Addedethpass.xyzURLOut of Scope19:15
Addedauth.moonpay.comURLIn Scope19:15
Addedhttps://github.com/moonpay/moonpay-demo-integrationsOTHEROut of Scope19:15
Addedhttps://apps.apple.com/app/id1635031432IOSIn Scope19:15
Addedqr.moonpay.comURLOut of Scope19:15
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedhypermint.comURLIn Scope00:44
Addeddocs.moonpay.comURLOut of Scope00:44
Addedhelp.moonpay.comURLOut of Scope00:44
Addedmoonpay.comURLIn Scope00:44
Addedhttps://play.google.com/store/apps/details?id=com.moonpayANDROIDIn Scope00:44
Addedhttps://github.com/moonpay/moonpay-demo-integrationsCODEOut of Scope00:44
Addedplexlabs.ioURLOut of Scope00:44
Addeddev.moonpay.comURLOut of Scope00:44
Addedapi.moonpay.comURLIn Scope00:44
Addedweb3.moonpay.comURLIn Scope00:44
Addedauth.moonpay.comURLIn Scope00:44
Addeddocs.hypermint.comURLOut of Scope00:44
Addedclicks.moonpay.comURLOut of Scope00:44
Addedqr.moonpay.comURLOut of Scope00:44
Addedsupport.moonpay.comURLOut of Scope00:44
Added*.plexlabs.ioWILDCARDOut of Scope00:44
Addedrequest-headers.moonpay.comURLOut of Scope00:44
Addedethpass.xyzURLOut of Scope00:44
Added*.hypermint.comWILDCARDIn Scope00:44
Addedhttps://github.com/moonpayURLOut of Scope00:44
Addedhttps://apps.apple.com/app/id1635031432IOSIn Scope00:44
Addedbuy.moonpay.comURLIn Scope00:44
Addedpage.moonpay.comURLOut of Scope00:44
Addedstorefront.hypermint.comURLOut of Scope00:44
Addedsell.moonpay.comURLIn Scope00:44
Added*.moonpaycloud.comWILDCARDIn Scope00:44
Addedpayload-marketing.moonpay.comURLOut of Scope00:44
Addedapp.moonpay.comURLIn Scope00:44
Added*.moonpay.comWILDCARDIn Scope00:44
Addedrequest-headers-no-proxy.moonpay.comURLOut of Scope00:44
Addedhttps://github.com/moonpay/moonpay-signCODEOut of Scope00:44
Addedhttps://github.com/moonpay/devops-challengeCODEOut of Scope00:44
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedhypermint.comURLIn Scope21:38
Removed*.hypermint.comWILDCARDIn Scope21:38
Removed*.moonpay.comWILDCARDIn Scope21:38
Removedhttps://github.com/moonpayCODEIn Scope21:38
Removedhttps://play.google.com/store/apps/details?id=com.moonpayANDROIDIn Scope21:38
Removedhttps://apps.apple.com/app/id1635031432IOSIn Scope21:38
Removedweb3.moonpay.comURLIn Scope21:38
Removedsell.moonpay.comURLIn Scope21:38
Removedbuy.moonpay.comURLIn Scope21:38
Removedauth.moonpay.comURLIn Scope21:38
Removedapp.moonpay.comURLIn Scope21:38
Removedapi.moonpay.comURLIn Scope21:38
Removedmoonpay.comURLIn Scope21:38
Removed*.moonpaycloud.comWILDCARDIn Scope21:38