{"id":"07e14180-dd4e-4ad5-9a3f-532f7361bc8e","engagementId":"5e301cf4-8730-4868-9220-2dbcb4fe2075","data":{"brief":{"id":"718473e6-3950-40f0-909b-f52fb172846f","name":"Bitpanda Ongoing Bug Bounty","tagline":"Submit your findings to the program!","description":"\u003cp\u003eNo technology is perfect and Bitpanda believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our targets. Good luck, and happy hunting!\u003c/p\u003e\n\n\u003cp\u003eBitpanda GmbH (Bitpanda) Bitpanda.com, Europe's leading retail exchange for buying and selling cryptocurrencies, has made every effort to secure its platform and mobile applications and eliminate all software vulnerabilities in its systems. As part of Bitpanda's security guidelines, we appreciate your cooperation in investigating and reporting any vulnerabilities of the Bitpanda Services (as defined below).\u003c/p\u003e\n\n\u003ch3\u003eAttention\u003c/h3\u003e\n\n\u003cp\u003e\u003cstrong\u003eRewards will be paid out in Bitcoins (BTC)\u003c/strong\u003e\u003cbr\u003e\nPayments will be made exclusively through our platform. To do so, you must have a verified account in Bitpanda. Once your submission is accepted, please provide either of the following to receive your reward:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eEmail address registered on out Bitpanda platform\u003c/li\u003e\n\u003cli\u003eValid UserID\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e\n\n\u003ch3\u003eThe use of Automated scanners is strictly prohibited.\u003c/h3\u003e","industryTagId":"6bf30795-7930-4c2b-bb79-d2c4f15f7740","targetsOverview":"\u003cp\u003eTesting is only authorized on the targets listed as in scope. Any domain/property of Bitpanda not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Bitpanda, you can report it to this program. However, be aware that it is ineligible for rewards or points-based compensation.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eAccess:\u003c/h3\u003e\n\n\u003cp\u003eFor all testing purposes add an HTTP header to your request to access the target which includes your \u003ccode\u003e@bugcrowdninja.com\u003c/code\u003e email address\u003c/p\u003e\n\n\u003cp\u003e\u003ccode\u003eX-Bug-Bounty: Bugcrowd-researcher@bugcrowdninja.com\u003c/code\u003e\u003c/p\u003e\n\n\u003ctable\u003e\n\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eIdentifier\u003c/th\u003e\n\u003cth style=\"text-align: left\"\u003eHeader\u003c/th\u003e\n\u003cth style=\"text-align: center\"\u003eExample\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\n\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\n\u003ccode\u003e@bugcrowdninja.com\u003c/code\u003e Email Address\u003c/td\u003e\n\u003ctd style=\"text-align: left\"\u003eX-Bug-Bounty: Bugcrowd-\u0026lt;email\u0026gt;\u003c/td\u003e\n\u003ctd style=\"text-align: center\"\u003e\u003ccode\u003eX-Bug-Bounty: Bugcrowd-researcher@bugcrowdninja.com\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\n\u003c/table\u003e\n\n\u003ch4\u003eTesting on user accounts\u003c/h4\u003e\n\n\u003cp\u003eWe would like to clearly state that accessing or using real user accounts \u003cstrong\u003ethat you don't own\u003c/strong\u003e and their associated information for testing purposes is not allowed under any circumstances. We kindly request that you only use test or personal accounts while conducting your security assessments.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eFocus Areas:\u003c/h3\u003e\n\n\u003cp\u003eIn the following, you find some examples of security issues that may be eligible for a reward in accordance with this program:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eLeakage of data\u003c/li\u003e\n\u003cli\u003eGetting malicious access to user funds\u003c/li\u003e\n\u003cli\u003ePrice manipulation within the platform\u003c/li\u003e\n\u003cli\u003eCode injection\u003c/li\u003e\n\u003cli\u003eCross-site scripting (XSS)\u003c/li\u003e\n\u003cli\u003eCross-site request forgery (CSRF)\u003c/li\u003e\n\u003cli\u003eRemote code execution\u003c/li\u003e\n\u003cli\u003ePrivilege escalation\u003c/li\u003e\n\u003cli\u003eAuthentication bypass\u003c/li\u003e\n\u003cli\u003eRemote Code Execution (RCE)\u003c/li\u003e\n\u003cli\u003eXML External Entity Injection (XXE)\u003c/li\u003e\n\u003cli\u003eBusiness logic Vulnerabilities (with impact)\u003c/li\u003e\n\u003cli\u003eVulnerabilities of Non-Bitpanda Services directly lead to a relevant impact on a Bitpanda Service.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch3\u003eOut of Scope Vulnerabilities\u003c/h3\u003e\n\n\u003cp\u003eAll vulnerabilities of Bitpanda Services that require or are related to the following are not eligible for a bug report and reward and are called ineligible vulnerabilities. Such ineligible vulnerabilities are in particular:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eUX issues not relating to security impacts\u003c/li\u003e\n\u003cli\u003eFailure to Invalidate Session On Password Reset and/or Change\u003c/li\u003e\n\u003cli\u003eBroken Link Submissions (Includes Hijacking of broken links)\u003c/li\u003e\n\u003cli\u003eVulnerabilities of any third-party software or application that interacts with Bitpanda Services.\u003c/li\u003e\n\u003cli\u003eAttacks related to email servers, email protocols, and email security (e.g., SPF, DMARC, DKIM, or email spam)\u003c/li\u003e\n\u003cli\u003eSocial engineering \u0026amp; identity theft actions\u003c/li\u003e\n\u003cli\u003eDisclosure of known public files or directories (e.g., robots.txt).\u003c/li\u003e\n\u003cli\u003eAttacking of physical security, DOS/DDOS, spamming, etc.\u003c/li\u003e\n\u003cli\u003eVulnerabilities of Non-Bitpanda Services not leading to a relevant impact on a Bitpanda Service.\u003c/li\u003e\n\u003cli\u003eVulnerabilities were related to outdated, unpatched browsers or operating systems.\u003c/li\u003e\n\u003cli\u003eVulnerabilities Bitpanda can't reproduce.\u003c/li\u003e\n\u003cli\u003eVulnerabilities in any open-source library.\u003c/li\u003e\n\u003cli\u003eVulnerabilities in existing banking functionalities (e.g., credit cards, wire transfers) can lead to any kind of abuse.\u003c/li\u003e\n\u003cli\u003eGoogle Maps API Key\u003c/li\u003e\n\u003cli\u003eTheoretical vulnerabilities without actual proof of concept.\u003c/li\u003e\n\u003cli\u003eClickjacking/UI redressing/TapJacking\u003c/li\u003e\n\u003cli\u003eMissing HTTP security headers, specifically (https://www.owasp.org/index.php/List_of_useful_HTTP_headers), e.g.\n\n\u003cul\u003e\n\u003cli\u003eStrict-Transport-Security, X-Frame-Options, X-XSS-Protection, X-Content-Type-Options, Content-Security-Policy, X-Content-Security-Policy, X-WebKit-CSP, Content-Security-Policy-Report-Only.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eCache-Control and Pragma\u003c/li\u003e\n\u003cli\u003eLack of HSTS\u003c/li\u003e\n\u003cli\u003eLack of Secure/HTTPOnly flags,\u003c/li\u003e\n\u003cli\u003eSSL/TLS Issues, e.g:\n\n\u003cul\u003e\n\u003cli\u003eSSL Attacks such as BEAST, BREACH, Renegotiation attacks, SSL Forward secrecy is not enabled, SSL weak/insecure cipher suites.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eMost brute-forcing issues without a clear impact\u003c/li\u003e\n\u003cli\u003eReports of missing “best practices” or other guidelines do not indicate a security issue.\u003c/li\u003e\n\u003cli\u003e\"Self\" XSS\u003c/li\u003e\n\u003cli\u003eUsername / email enumeration.\u003c/li\u003e\n\u003cli\u003eInsufficient session expiration\u003c/li\u003e\n\u003cli\u003eLogout Cross-Site Request Forgery (logout CSRF).\u003c/li\u003e\n\u003cli\u003eRecently (less than 30 days) disclosed 0day vulnerabilities\u003c/li\u003e\n\u003cli\u003eIssues that require physical access to a victim’s computer/device\u003c/li\u003e\n\u003cli\u003eMissing reCAPTCHA/RateLimit.\u003c/li\u003e\n\u003cli\u003eLogin or Forgot Password page brute force and account lockout not enforced.\u003c/li\u003e\n\u003cli\u003eDescriptive error messages (e.g., Stack Traces, application or server errors).\u003c/li\u003e\n\u003cli\u003eExploits that are only possible on Android version 9.x and below\u003c/li\u003e\n\u003cli\u003eExploits that are only possible on IOS version 12.x and below\u003c/li\u003e\n\u003cli\u003eExploits that are only possible on a jailbroken device\u003c/li\u003e\n\u003cli\u003eJailbreak and root detection\u003c/li\u003e\n\u003cli\u003eCrashing your application\u003c/li\u003e\n\u003cli\u003eTesting for weak credentials\u003c/li\u003e\n\u003cli\u003eEmail bombing/Flooding/rate limiting\u003c/li\u003e\n\u003cli\u003eVulnerabilities Bitpanda can't reasonably fix or do anything about it (e.g., heart bleed bug or bugs concerning telecommunication systems)\u003c/li\u003e\n\u003cli\u003eVulnerabilities that have not been responsibly investigated.\u003c/li\u003e\n\u003cli\u003eVulnerabilities that have not been thoroughly reported.\u003c/li\u003e\n\u003cli\u003eVulnerabilities that have been known by us or reported by someone else first. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"034bcb28-c0b6-4b3c-a583-23b1d5aadf52","name":"Tier 1 Assets ","targets":[{"id":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2","uri":"https://web.bitpanda.com","name":"https://web.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"450ea22f-a740-4efe-8c88-6006b8eb3bb4","sortOrder":0},"sortOrder":0,"tags":[{"id":"005d6fd9-5c1a-45f7-a2b6-af0e2fdfd820","name":"Laravel","targetId":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2"},{"id":"84ff9b26-d234-4bba-8b77-f0f02d67d359","name":"Django","targetId":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2"},{"id":"abbd0575-727e-4565-8046-f7fa78eaf368","name":"PHP","targetId":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2"},{"id":"eaa69542-87cd-413a-9b74-3e75f9fb01e4","name":"Angular","targetId":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2"},{"id":"f21f7de7-31b4-4cc8-89a4-39c9eb6b7345","name":"Python","targetId":"bc14d2a6-422e-46f6-a2bd-89b20460dbb2"}],"recentChangeFlags":null},{"id":"50718a55-d70e-4cec-b2d8-0c85a6ccb27c","uri":"https://www.bitpanda.com/","name":"https://www.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"83d01cb2-a42f-457e-af80-7d24c89c97ba","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"50718a55-d70e-4cec-b2d8-0c85a6ccb27c"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"50718a55-d70e-4cec-b2d8-0c85a6ccb27c"},{"id":"ce8ff3cd-4d54-4404-8321-6351781551a3","name":"Vue.js","targetId":"50718a55-d70e-4cec-b2d8-0c85a6ccb27c"}],"recentChangeFlags":null},{"id":"deafa7e6-5d71-4996-977b-24ac52772fc3","uri":"","name":"https://api.bitpanda.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3096888b-fd9c-4d3a-af14-de1b54eb9739","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"deafa7e6-5d71-4996-977b-24ac52772fc3"}],"recentChangeFlags":null},{"id":"6ae13565-7a74-49eb-aa77-7336042427ee","uri":"","name":"wss://socket.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7bee47a0-2509-44b8-a6aa-470a070cf9b2","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6ae13565-7a74-49eb-aa77-7336042427ee"}],"recentChangeFlags":null},{"id":"e793206e-42ce-4746-8e57-f985045bc5f4","uri":"","name":"All the Blockchain Infrastructure","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b1323838-0cd5-48cf-8f02-b8c62da078b0","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"0fb2e6f5-462a-4f33-a029-24c6f1da28e1","uri":"https://account.bitpanda.com","name":"https://account.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0ecff9f2-bc6c-44ea-86c6-03997f039487","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0fb2e6f5-462a-4f33-a029-24c6f1da28e1"}],"recentChangeFlags":null},{"id":"5c92fb16-cb20-465e-bec5-c687ab35e39f","uri":"https://play.google.com/store/apps/details?id=com.bitpanda.bitpanda","name":"Bitpanda Broker Android App","category":"android","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2b689894-000b-48ee-b7bf-926b94433510","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"5c92fb16-cb20-465e-bec5-c687ab35e39f"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"5c92fb16-cb20-465e-bec5-c687ab35e39f"}],"recentChangeFlags":null},{"id":"7cece77c-a599-4987-a82c-5c221c914d4f","uri":"https://apps.apple.com/app/bitpanda-buy-bitcoin-crypto/id1449018960","name":"Bitpanda Broker iOS App","category":"ios","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"59ed0efe-881b-450d-88c0-48a61fe27733","sortOrder":0},"sortOrder":0,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"7cece77c-a599-4987-a82c-5c221c914d4f"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"7cece77c-a599-4987-a82c-5c221c914d4f"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"58d954d9-8930-443d-abc5-1122136f6bff","p1MaxCents":1500000,"p1MinCents":400000,"p2MaxCents":400000,"p2MinCents":120000,"p3MaxCents":120000,"p3MinCents":50000,"p4MaxCents":50000,"p4MinCents":20000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003ch3\u003eImportant\u003c/h3\u003e\n\n\u003cp\u003eAs a company operating in a highly regulated sector, we need to take our responsibility to our user base very seriously. This means that we are required to have specific conditions in place, even for researchers testing on our platform. We understand that this may be frustrating, but please know that it is necessary for us to maintain compliance. \u003cbr\u003e\nThis means the following for you as a researcher:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eWhen you first log into our platform, you will have access to a limited range of testing features. However, once you \u003ca href=\"https://support.bitpanda.com/hc/en-us/articles/360000920649-How-to-verify-%20your%20account\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003everify\u003c/a\u003e, you will have access to all features. \u003c/li\u003e\n\u003cli\u003eTo make the verification process as smooth as possible, we can only accept certain documents from the countries listed \u003ca href=\"https://support.bitpanda.com/hc/en-us/articles/360000996469\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e. Please refer to our website for a list of accepted documents. Thank you for your understanding and cooperation.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":4000,"max":15000},"2":{"min":1200,"max":4000},"3":{"min":500,"max":1200},"4":{"min":200,"max":500},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"bdc56721-6cfd-4a96-a493-00ef34911356","name":"Tier 2 Assets ","targets":[{"id":"7d75e6b6-0015-4471-8829-3a70b5491e87","uri":"https://blog.bitpanda.com/en","name":"https://blog.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2d1545d1-4089-4fde-bfa9-2a8909eaa74d","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b8ced25c-8b8e-41c8-941d-6d14689a321f","uri":"https://www.bitpanda.com/academy/en/","name":"https://www.bitpanda.com/academy/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"32707545-e0b5-423c-a1b7-e3c7259994e6","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"5ab77097-3065-411d-94b5-2d215a3b788b","p1MaxCents":150000,"p1MinCents":75000,"p2MaxCents":75000,"p2MinCents":45000,"p3MaxCents":45000,"p3MinCents":20000,"p4MaxCents":20000,"p4MinCents":10000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":750,"max":1500},"2":{"min":450,"max":750},"3":{"min":200,"max":450},"4":{"min":100,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"19cdb341-321e-4de5-a070-cc26ec1ba0e0","name":"Out of Scope","targets":[{"id":"269dc323-732d-42c4-96c8-089f250cb6af","uri":"https://support.bitpanda.com","name":"https://support.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"d12299a0-3a2f-4951-8636-8631d35e5ac1","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c8c7d23d-1f29-4e7e-9984-68cdadfe4b23","uri":"https://maintenance.bitpanda.com","name":"https://maintenance.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"63d507d6-461c-4b45-ba67-aadb2d9a8b90","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"b832c7a4-c775-4569-bab2-9c5939ee5462","uri":"https://beta.bitpanda.com","name":"https://beta.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"91e56c6c-d7c4-44c4-af3c-7bbbb188c1fa","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"3f00fec2-0bae-4860-a397-7ae5f31eb8a9","uri":"https://developers.bitpanda.com","name":"https://developers.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0a025284-ea45-4882-987a-97ff822d8e34","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"55242bdb-1a08-4e00-8019-a740ab515a2f","uri":"http://partners.whitelabel.bitpanda.com/","name":"http://partners.whitelabel.bitpanda.com/","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"cbfc0721-6aa9-4553-840b-493b49138a10","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"6a9f065a-6c74-4469-9205-9f2ce78cf666","uri":"http://status.bitpanda.com","name":"http://status.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6e162f94-bfb7-48fe-b93b-0164b6efe0b9","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"211005b4-5d2a-431f-8fe2-6c42b5d11b86","uri":"https://requests.bitpanda.com","name":"https://requests.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4e49c3cf-4857-4384-91ec-c46b1cfa2a35","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"d9c490fc-f369-4299-8f2d-b66527d736b9","uri":"https://*.exchange.bitpanda.com","name":"*.exchange.bitpanda.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"16068f8a-8a03-41c6-ab11-1484de83a37f","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":2,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"5e301cf4-8730-4868-9220-2dbcb4fe2075","code":"bitpanda-og-bb","state":"in_progress","endsAt":null,"bountyId":"513cf5ae-cff0-4470-80df-10bc4351eec2","startsAt":"2022-10-25T00:00:00Z"},"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Finance","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/f848/5e18/735889c6/9bf7509ccdefcef6ba5b622cca76a2f2_Bitpanda_logo.jpeg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2022-10-25T00:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/bitpanda-og-bb","changelogs":"/engagements/bitpanda-og-bb/changelog","submissions":null,"announcements":"/engagements/bitpanda-og-bb/announcements","hallOfFame":"/engagements/bitpanda-og-bb/hall_of_fames","crowdstream":"/engagements/bitpanda-og-bb/crowdstream"},"announcementsCount":2,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/bitpanda-og-bb/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=bitpanda-og-bb\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/bitpanda-og-bb/engagement_subscribers","engagementChangelogsUrl":"/engagements/bitpanda-og-bb/changelog","publishedAt":"2025-03-17T14:15:24.149Z","engagementChangelogUrl":"/engagements/bitpanda-og-bb/changelog/07e14180-dd4e-4ad5-9a3f-532f7361bc8e","createUserFeedbacksUrl":"/engagements/bitpanda-og-bb/feedbacks","engagementCrowdstreamUrl":"/engagements/bitpanda-og-bb/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}