metamask

HackerOneView on HackerOne

RawAI Enhanced

16

In Scope

19

Out of Scope

In-Scope Assets (16)

Asset	Category	Bounty	Quick Links
*.api.cx.metamask.io	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
MetaMask Browser Extension	OTHER	Yes	-
MetaMask SDK	OTHER	Yes	-
Snaps	OTHER	Yes	-
Third Party Snaps	OTHER	No	-
api-wallet.web3auth.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://*.metamask.io	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://github.com/Web3Auth/web3auth-web	CODE	Yes	-
https://metamask.github.io/phishing-warning/<vX.Y.Z>	OTHER	Yes	-
io.metamask	ANDROID	Yes	Play Store APKPure APKMirror
io.metamask.Metamask	IOS	Yes	-
mUSD Stablecoin	OTHER	Yes	-
metamask.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
signature-insights.api.cx.metamask.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
snaps.metamask.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
wallet.web3auth.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (19)

Asset	Category	Bounty
Core Tier Assets	OTHER	No
Message signing snap	OTHER	No
Metamask Flask Extension	OTHER	No
Non-Core Tier Assets	OTHER	No
Snaps Development Packages	CODE	No
Wallet Tier Assets	OTHER	No
api-dashboard.web3auth.io	URL	No
card.metamask.io	URL	No
community.metamask.io	URL	No
dashboard.web3auth.io	URL	No
developer.metamask.io	URL	No
https://metamask.github.io/	OTHER	No
https://mmi-support.metamask.io/	URL	No
https://support.metamask.io/	URL	No
https://user-storage.api.cx.metamask.io	URL	No
https://www.npmjs.com/search?q=%40metamask	OTHER	No
permissionless.snaps.metamask.io	URL	No
portfolio.metamask.io	URL	No
travel.metamask.io	URL	No