{"id":"c2bdd90c-9f9b-4c3e-9225-a5dc9570bfb9","engagementId":"11aaaac5-c1f1-4165-a133-8bfa9baaabe8","data":{"brief":{"id":"698016d8-89b1-45c1-b920-5ca84a0c44e5","name":"Binance","tagline":"Cryptocurrency Exchange‎","description":"\u003chr\u003e\n\n\u003ch2\u003e\u003cem\u003eFor security issues related to cryptocurrencies and their components ONLY:\u003c/em\u003e\u003c/h2\u003e\n\n\u003cp\u003eIf you have found a security issue that directly affects a cryptocurrency and/or its components (e.g. blockchain, node, wallet), please ensure that you report it directly to the program.\u003c/p\u003e\n\n\u003ch2\u003eNon-security related issues:\u003c/h2\u003e\n\n\u003cp\u003eTo report an issue without security impact, please open a support chat at \u003ca href=\"https://www.binance.com/en/support\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://www.binance.com/en/support\u003c/a\u003e (chat icon is located at  the bottom right of the page). Thank you for your efforts in helping keep Binance and its users safe! \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAbout:\u003c/h2\u003e\n\n\u003cp\u003eBinance is the world’s leading blockchain ecosystem and cryptocurrency infrastructure provider with a financial product suite that includes the largest digital asset exchange by trading volume.\u003c/p\u003e\n\n\u003cp\u003eTrusted by millions worldwide, the Binance’s platform is dedicated to increasing the freedom of money for people all around the world, by providing access to broad financial tools across a growing, wide network while maintaining the lowest fees in the business. \u003c/p\u003e\n\n\u003cp\u003eBinance’s mission is to be the infrastructure provider to the blockchain ecosystem. Today, Binance is a global blockchain ecosystem spanning across trading services, infrastructure solutions, educational resources, research, social good and charitable programs, investment and incubation initiatives, and more. The Binance ecosystem also includes partners such as Trust Wallet, CoinMarketCap, and more.\u003c/p\u003e\n\n\u003cp\u003eFor more information, visit \u003ca href=\"https://www.binance.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ewww.binance.com\u003c/a\u003e\u003c/p\u003e\n\n\u003ch2\u003ePolicy:\u003c/h2\u003e\n\n\u003cp\u003eAt Binance, the security of our users is our number one priority. As such, we strive to provide the most secure platform possible. We will evaluate reported security issues based on the security impact to our users and the Binance ecosystem.\u003c/p\u003e\n\n\u003cp\u003eThis bounty brief describes the rules of the Binance bug bounty program, as well as the eligibility of vulnerabilities and the rewards. \u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eRewards/Ratings:\u003c/h2\u003e\n\n\u003cp\u003eThis program takes reference from the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e for the prioritization/rating of findings. Prioritization/ratings may vary from the Bugcrowd Vulnerability Rating Taxonomy.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eRewards will be paid out in \u003cem\u003eBNB\u003c/em\u003e\u003c/strong\u003e.\u003cbr\u003e\u003cbr\u003e\nOnce your submission is accepted, please provide either of the following to receive your reward.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eemail address registered on Binance\u003c/li\u003e\n\u003cli\u003eyour BNB (BSC) wallet address\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eWe suggest researchers create a separate private Binance account, or a Binance Smart Chain wallet. \u003c/p\u003e\n\n\u003cp\u003e*Prices will change with the cryptocurrency markets and the dollar amount listed below could change.\u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003ePlease note that only vulnerabilities with a working proof of concept that shows how it can be exploited will be considered eligible for monetary rewards. Determination of whether a reported issue sufficiently meets the bar for monetary rewards is done at Binance's discretion.\u003c/strong\u003e\u003c/em\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003e*Binance is eager to work with the community to make sure that every researcher's finding is rewarded fairly - based on the vulnerability's impact on business and overall severity. To this end, it is possible that extraordinarily severe issues or those with extreme impact may be rewarded up to $100,000.\u003c/em\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003eBinance may award an additional reward bonus for exceptional reports. This will be done at Binance's discretion .\u003c/em\u003e\u003c/p\u003e","industryTagId":"6bf30795-7930-4c2b-bb79-d2c4f15f7740","targetsOverview":"\u003cp\u003e\u003cem\u003eAny domain/property of Binance not listed in the targets section is out of scope.\u003c/em\u003e\u003c/p\u003e\n\n\u003ch2\u003eTarget Information:\u003c/h2\u003e\n\n\u003ch3\u003eBinance\u003c/h3\u003e\n\n\u003cp\u003ePrimary Targets - Eligible for bounty from P4 and above\u003c/p\u003e\n\u003cdiv class=\"highlight\"\u003e\u003cpre class=\"highlight plaintext\"\u003e\u003ccode\u003e*.binance.com (with exceptions, refer to Secondary Targets)\napi.binance.com\nbinance.us\nBinance Mobile Application for Android\nBinance Mobile Application for iOS\nBinance Desktop Application\nBinance macOS Application\nBinance Connect\nbinance.tr\n\u003c/code\u003e\u003c/pre\u003e\u003c/div\u003e\n\u003cp\u003eSecondary Targets - Eligible for bounty for P1 and P2. P3 and P4 will be points only\u003c/p\u003e\n\u003cdiv class=\"highlight\"\u003e\u003cpre class=\"highlight plaintext\"\u003e\u003ccode\u003eacademy.binance.com\ninfo.binance.com\ncoinmarketcap.com\napi.coinmarketcap.com\npro-api.coinmarketcap.com\npro.coinmarketcap.com\nportal-api.coinmarketcap.com\n3rdparty-apis.coinmarketcap.com\nCoinMarketCap Android app\nCoinMarketCap iOS app\n\u003c/code\u003e\u003c/pre\u003e\u003c/div\u003e\n\u003cp\u003e\u003cstrong\u003eFor Bugs Affecting Multiple Binance Exchanges\u003c/strong\u003e\u003cbr\u003e\nIf an issue reported for one of our exchanges (e.g. binance.com) affects any of our other exchanges, and shares the same root cause, it will be treated as a single issue. Please do not report the same exact bug multiple times.\u003c/p\u003e\n\n\u003ch2\u003eAccess:\u003c/h2\u003e\n\n\u003cp\u003eResearchers are encouraged to self-provision accounts as needed; when doing so, please sign up for an account using your @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://researcherdocs.bugcrowd.com/v2.0/docs/your-bugcrowdninja-email-address\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTrustwallet Vulnerability Classifications\u003c/h2\u003e\n\n\u003ch3\u003eIn scope:\u003c/h3\u003e\n\n\u003cp\u003e\u003ca href=\"https://play.google.com/store/apps/details?id=com.wallet.crypto.trustapp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eTrustwallet Android app\u003c/a\u003e\u003cbr\u003e\n\u003ca href=\"https://apps.apple.com/app/trust-ethereum-wallet/id1288339409\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eTrustwallet iOS app\u003c/a\u003e\u003cbr\u003e\n\u003ca href=\"https://github.com/trustwallet/wallet-core/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eTrustwallet walletcore\u003c/a\u003e\u003cbr\u003e\nTrustwallet Chrome Extension\u003c/p\u003e\n\n\u003ch3\u003eOut of scope:\u003c/h3\u003e\n\n\u003cp\u003e*.trustwallet.com\u003cbr\u003e\n*.trustwalletapp.com\u003c/p\u003e\n\n\u003ch3\u003eExamples of issues that we are looking for:\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eVulnerabilities that can cause a loss of user funds/assets remotely\u003c/li\u003e\n\u003cli\u003eVulnerabilities that can cause exposure of private keys or mnemonic seed phrase remotely\u003c/li\u003e\n\u003cli\u003eVulnerabilities in chain-related implementations\u003c/li\u003e\n\u003cli\u003eDenial of service of the wallet app\u003c/li\u003e\n\u003cli\u003eRemote code execution\u003c/li\u003e\n\u003cli\u003eInsecure cryptographic implementation for sensitive functions such as wallet generation, transaction signing etc.\u003c/li\u003e\n\u003cli\u003eLock screen bypass\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eIneligible issues:\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eVulnerabilities that require root/jailbreak to exploit (points only if a change is made)\u003c/li\u003e\n\u003cli\u003e3rd party library dependencies\u003c/li\u003e\n\u003cli\u003eAddress bar spoofing in dapp browser\u003c/li\u003e\n\u003cli\u003eWeb vulnerabilities for *.trustwallet.com and *.trustwalletapp.com\u003c/li\u003e\n\u003cli\u003eIssues related to TWT referral \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eActions to avoid:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eTesting on accounts other than those that you own\u003c/li\u003e\n\u003cli\u003eAutomated testing using tools such as scanners\u003c/li\u003e\n\u003cli\u003eExcessive request attempts that affects the availability of our services to all users\u003c/li\u003e\n\u003cli\u003eDestruction of data\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eIneligible issues (Will be closed as out of scope):\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eTheoretical vulnerabilities without actual proof of concept\u003c/li\u003e\n\u003cli\u003eEmail verification deficiencies, expiration of password reset links, and password complexity policies\u003c/li\u003e\n\u003cli\u003eInvalid or missing SPF (Sender Policy Framework) records (incomplete or missing SPF/DKIM/DMARC)\u003c/li\u003e\n\u003cli\u003eClickjacking/UI redressing with minimal security impact\u003c/li\u003e\n\u003cli\u003eEmail or mobile enumeration (E.g. the ability to identify emails via password reset)\u003c/li\u003e\n\u003cli\u003eInformation disclosure with minimal security impact (E.g. stack traces, path disclosure, directory listings, logs)\u003c/li\u003e\n\u003cli\u003eInternally known issues, duplicate issues, or issues which have already been made public\u003c/li\u003e\n\u003cli\u003eTab-nabbing\u003c/li\u003e\n\u003cli\u003eSelf-XSS\u003c/li\u003e\n\u003cli\u003eVulnerabilities only exploitable on out-of-date browsers or platforms\u003c/li\u003e\n\u003cli\u003eVulnerabilities related to auto-fill web forms\u003c/li\u003e\n\u003cli\u003eUse of known vulnerable libraries without actual proof of concept\u003c/li\u003e\n\u003cli\u003eLack of security flags in cookies\u003c/li\u003e\n\u003cli\u003eIssues related to unsafe SSL/TLS cipher suites or protocol version\u003c/li\u003e\n\u003cli\u003eContent spoofing\u003c/li\u003e\n\u003cli\u003eCache-control related issues\u003c/li\u003e\n\u003cli\u003eExposure of internal IP address or domains\u003c/li\u003e\n\u003cli\u003eMissing security headers that do not lead to direct exploitation\u003c/li\u003e\n\u003cli\u003eCSRF with negligible security impact (E.g. adding to favourites, adding to cart, subscribing to a non critical feature)\u003c/li\u003e\n\u003cli\u003eVulnerabilities that require root/jailbreak\u003c/li\u003e\n\u003cli\u003eVulnerabilities that require physical access to a user's device\u003c/li\u003e\n\u003cli\u003eIssues that have no security impact (E.g. Failure to load a web page)\u003c/li\u003e\n\u003cli\u003eAssets that do not belong to Binance \u003c/li\u003e\n\u003cli\u003eAny activity (like DoS/DDoS) that disrupts our services\u003c/li\u003e\n\u003cli\u003eInstallation Path Permissions\u003c/li\u003e\n\u003cli\u003eReports from automated tools or scans\u003c/li\u003e\n\u003cli\u003eLinks to invalid/expired pages (Only valid if you can demonstrate an actual takeover of an official Binance social media account linked to on every page, not just specific past announcements/blog posts)\u003c/li\u003e\n\u003cli\u003eSocial Engineering\u003cbr\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e","safeHarborStatus":{"status":"partial","label":"Partial safe harbor","description":"This engagement provides a limited goodwill statement about not pursuing legal action related to security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"c58ae5f5-7c0c-4191-a3ac-13e195aa550e","name":"In Scope","targets":[{"id":"e60d9cf7-f86f-4991-b058-6ed08dccc6a8","uri":"","name":"api.coinmarketcap.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d8030619-1c35-4a99-adb9-ea4e9caf723a","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"9fcee87e-9704-4541-9f2d-3dcb12eb4320","uri":"","name":"pro-api.coinmarketcap.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e085b970-f1d6-4be4-9c95-e03b7d0424ae","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"cee3c0a8-c040-4be2-8b75-9581b585330f","uri":"https://www.binance.com/","name":"*.binance.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4a17a2a5-888c-4fc5-bbe7-8d36cd4bb324","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"cee3c0a8-c040-4be2-8b75-9581b585330f"},{"id":"9dd4899d-3a63-4126-8c83-c1fc1de50c25","name":"Amazon Cloudfront","targetId":"cee3c0a8-c040-4be2-8b75-9581b585330f"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"cee3c0a8-c040-4be2-8b75-9581b585330f"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cee3c0a8-c040-4be2-8b75-9581b585330f"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"cee3c0a8-c040-4be2-8b75-9581b585330f"}],"recentChangeFlags":null},{"id":"2e63fae0-4ea4-4e4a-8d5c-ba89f6918f99","uri":null,"name":"Binance Desktop Application","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"ffbc6a0c-495c-4781-8364-fd9a634d049e","sortOrder":0},"sortOrder":0,"tags":[{"id":"d8e93657-68c0-4b47-ae77-d3c15602dd5b","name":"Cryptocurrency","targetId":"2e63fae0-4ea4-4e4a-8d5c-ba89f6918f99"},{"id":"fc8162a2-8e37-4a27-8cbd-3b40e7799f4e","name":"Desktop Application Testing","targetId":"2e63fae0-4ea4-4e4a-8d5c-ba89f6918f99"}],"recentChangeFlags":null},{"id":"b3d44862-095a-43d5-b9fc-0eb69658e8f0","uri":null,"name":"Binance Mobile Application for Android","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"84a160e4-f484-4b75-8369-9b8e37e70d6c","sortOrder":0},"sortOrder":0,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"b3d44862-095a-43d5-b9fc-0eb69658e8f0"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"b3d44862-095a-43d5-b9fc-0eb69658e8f0"},{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"b3d44862-095a-43d5-b9fc-0eb69658e8f0"},{"id":"d8e93657-68c0-4b47-ae77-d3c15602dd5b","name":"Cryptocurrency","targetId":"b3d44862-095a-43d5-b9fc-0eb69658e8f0"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"b3d44862-095a-43d5-b9fc-0eb69658e8f0"}],"recentChangeFlags":null},{"id":"93fc0477-2053-4b5c-aa14-8e5a2b2e5c05","uri":null,"name":"Binance Mobile Application for iOS","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f6031f1e-9e63-48ad-b9e0-43760dbf6db9","sortOrder":0},"sortOrder":0,"tags":[{"id":"63c4a71d-215f-49ca-8ea8-240dfbf82d61","name":"Objective-C","targetId":"93fc0477-2053-4b5c-aa14-8e5a2b2e5c05"},{"id":"7692155d-e2db-4c50-abd5-208448a85fde","name":"SwiftUI","targetId":"93fc0477-2053-4b5c-aa14-8e5a2b2e5c05"},{"id":"a47bcaa8-a080-4539-b4ca-e699e72d2023","name":"Swift","targetId":"93fc0477-2053-4b5c-aa14-8e5a2b2e5c05"},{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"93fc0477-2053-4b5c-aa14-8e5a2b2e5c05"},{"id":"d8e93657-68c0-4b47-ae77-d3c15602dd5b","name":"Cryptocurrency","targetId":"93fc0477-2053-4b5c-aa14-8e5a2b2e5c05"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"93fc0477-2053-4b5c-aa14-8e5a2b2e5c05"}],"recentChangeFlags":null},{"id":"926313af-8aba-42f5-b59a-2fcafb0d7a7c","uri":null,"name":"api.binance.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a35eb0c1-0599-4700-a597-9b4457fd1f30","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"926313af-8aba-42f5-b59a-2fcafb0d7a7c"},{"id":"cbf0ee58-c41b-4dee-9d08-cefd01f5d7d6","name":"HTTP","targetId":"926313af-8aba-42f5-b59a-2fcafb0d7a7c"},{"id":"d8e93657-68c0-4b47-ae77-d3c15602dd5b","name":"Cryptocurrency","targetId":"926313af-8aba-42f5-b59a-2fcafb0d7a7c"}],"recentChangeFlags":null},{"id":"5576c911-fb2c-47ce-b33c-dfdccdfc225c","uri":null,"name":"Binance macOS Application","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b3c07ed1-f2c8-4d10-a23a-836c23cd0aa0","sortOrder":0},"sortOrder":0,"tags":[{"id":"c5df6ad0-33b4-40ac-b6dd-8d4038997d40","name":"macOS","targetId":"5576c911-fb2c-47ce-b33c-dfdccdfc225c"},{"id":"d8e93657-68c0-4b47-ae77-d3c15602dd5b","name":"Cryptocurrency","targetId":"5576c911-fb2c-47ce-b33c-dfdccdfc225c"}],"recentChangeFlags":null},{"id":"b00c36f0-dbab-4d1c-b37c-9af3ca44f60e","uri":"","name":"pro.coinmarketcap.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c10b1fa3-909e-4727-a040-f94eb908f310","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"5a739a8c-df59-47a0-8e00-32c5c0bf8ca1","uri":"","name":"CoinMarketCap Android app","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d547138b-3872-4b12-ba90-60046877bdb7","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"531127b0-47f4-430e-abcf-692beaf61ab6","uri":null,"name":"Trustwallet Android App","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b56e8226-3450-483b-980e-696d8417bfc0","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"64b020d8-9d59-4397-8d14-910281296fef","uri":null,"name":"Trustwallet iOS App","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8a5ace6a-7302-40f3-85e9-d673b08f596e","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"d50df824-c177-4ad4-acad-5f7a5ff70edd","uri":null,"name":"https://github.com/trustwallet/wallet-core/","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c12c96f9-4043-44ef-88bd-7452f5c96189","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c00e7d85-5525-4532-a00e-4cb9570d9219","uri":"","name":"CoinMarketCap iOS app","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bebbc1f6-3a3d-4c82-ad63-47fa36be1f86","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"977fcccf-cbab-4f71-9046-03ad3fddecd9","uri":"","name":"portal-api.coinmarketcap.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dbf5b71b-0962-4969-abee-dfe2d04b7b8f","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"483d8de2-f547-4328-9566-4fd9f392b1bf","uri":"","name":"coinmarketcap.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"33dd7895-d37f-4fe2-a38f-ad4bfa0f21fd","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"6c6920bc-a8df-4558-8dd5-fdab9bbaba68","uri":"","name":"3rdparty-apis.coinmarketcap.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"27ef78e1-97c9-4fee-84b6-d74ba9883f31","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb","uri":"https://www.binance.us/","name":"*.binance.us","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"20619ef9-25ed-4073-83c7-8cc06e1fb263","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb"},{"id":"9dd4899d-3a63-4126-8c83-c1fc1de50c25","name":"Amazon Cloudfront","targetId":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb"},{"id":"c49c16cd-2242-45f8-b172-1047bfd56d52","name":"UIKit","targetId":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb"},{"id":"d8e93657-68c0-4b47-ae77-d3c15602dd5b","name":"Cryptocurrency","targetId":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"1ba1f071-6d2b-465b-bdb9-dd0ef40f57fb"}],"recentChangeFlags":null},{"id":"6eec38c2-2b55-4ad2-bbc5-a3d06610aeb9","uri":"https://binance.tr","name":"binance.tr","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7b209355-5ba9-4542-9787-90ccd6f43e7d","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6eec38c2-2b55-4ad2-bbc5-a3d06610aeb9"}],"recentChangeFlags":null},{"id":"878d855c-f520-4941-a7a7-9c1bb432113d","uri":"","name":"Trustwallet Chrome Extension","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"05d93a53-9275-4ee4-a1fd-bd75f0758f97","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"e8a9c6ab-6c03-419e-bb6e-12d8680869d3","p1MaxCents":1000000,"p1MinCents":500000,"p2MaxCents":500000,"p2MinCents":150000,"p3MaxCents":150000,"p3MinCents":60000,"p4MaxCents":60000,"p4MinCents":20000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":10000000},"descriptionHtml":null,"rewardRangeData":{"1":{"min":5000,"max":10000},"2":{"min":1500,"max":5000},"3":{"min":600,"max":1500},"4":{"min":200,"max":600},"5":{"min":null,"max":null},"programMax":100000},"recentChangeFlags":null},{"id":"5c06c135-8c2a-4446-be23-6768f6e30830","name":"Out of Scope","targets":[{"id":"66d5d4e5-b326-4a94-9a4a-df1acdb7325f","uri":"","name":"jobs.coinmarketcap.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"53d510c7-f5ae-4aeb-8d3b-ba84cd660802","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"348b55c5-d3f9-44db-955e-0dde037c827e","uri":null,"name":"support.binance.*","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f6ee85b5-b139-4e65-aa81-a5d3c2368bbb","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"348b55c5-d3f9-44db-955e-0dde037c827e"}],"recentChangeFlags":null},{"id":"1bd58e9f-b7d1-45c8-90d6-25ea505783e2","uri":null,"name":"binance.sg","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2b7acd8d-42a7-4935-8a60-a8bfee25bf79","sortOrder":0},"sortOrder":0,"tags":[{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"1bd58e9f-b7d1-45c8-90d6-25ea505783e2"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1bd58e9f-b7d1-45c8-90d6-25ea505783e2"},{"id":"d8e93657-68c0-4b47-ae77-d3c15602dd5b","name":"Cryptocurrency","targetId":"1bd58e9f-b7d1-45c8-90d6-25ea505783e2"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"1bd58e9f-b7d1-45c8-90d6-25ea505783e2"}],"recentChangeFlags":null},{"id":"ed0b9fda-258d-4197-a0bc-16dd972f71bd","uri":null,"name":"*.trustwallet.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"53fb7178-8641-4f6d-8971-36f01eb5f6af","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"2ce3fc68-c413-400a-8fcf-f6be49bd273d","uri":null,"name":"*.trustwalletapp.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"f9a20843-2717-4483-a884-a85222f966d4","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"5c47cbcc-7315-4ea9-9435-863500f480ab","uri":"","name":"*.binance.org","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6fba7d2c-ab85-4eeb-9570-104dfbe7540b","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"f7d23538-1465-485c-8f90-692e1d30f7c4","uri":"","name":"blog.coinmarketcap.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"92ada5cf-8ac2-4f01-8e3d-9e1641a13376","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"9e6d1f36-950f-4c76-88b8-79c5b8509d6f","uri":"","name":"support.coinmarketcap.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0e521ec6-e141-40b9-a8f7-9ead101a1239","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c7f519a3-3b6e-4d5b-a90c-2e751103459c","uri":"","name":"blockchain.coinmarketcap.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1c43f06d-9cdc-4e88-88d4-829f698157cd","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e1413f77-06a0-4e69-ad45-296dc8241517","uri":"","name":"*.coinmarketcap.com","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"630986fe-4929-4459-85af-f977060dd247","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"11aaaac5-c1f1-4165-a133-8bfa9baaabe8","code":"binance","state":"in_progress","endsAt":null,"bountyId":"c07008ad-caba-43d7-90d0-2fec83f3b66e","startsAt":"2018-04-12T18:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Finance","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/4449/adbf/9dc16f2a/d82f470be0edd8aa4acd2b1eb7ecf821_Binance-logo.png","logoBackgroundColor":"#000","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2018-04-12T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/binance","changelogs":"/engagements/binance/changelog","submissions":null,"announcements":"/engagements/binance/announcements","hallOfFame":"/engagements/binance/hall_of_fames","crowdstream":"/engagements/binance/crowdstream"},"announcementsCount":8,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/binance/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=binance\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/binance/engagement_subscribers","engagementChangelogsUrl":"/engagements/binance/changelog","publishedAt":"2025-01-07T08:27:07.329Z","engagementChangelogUrl":"/engagements/binance/changelog/c2bdd90c-9f9b-4c3e-9225-a5dc9570bfb9","createUserFeedbacksUrl":"/engagements/binance/feedbacks","engagementCrowdstreamUrl":"/engagements/binance/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}