In brief. Coinbase is a bug bounty program on Cantina. 21 assets are listed in scope, 21 of them bounty-eligible.
Coinbase
Work at Coinbase? Claim it to respond to reviews as the verified owner.
Found a vulnerability?
If you'd rather not deal with the vendor yourself, a BugRater analyst will submit it to them for you, with your explicit permission, and tell you what they said.
Ask BugRater to submit itReports are private. The report body is encrypted at rest. BugRater holds the key, so the analyst handling your report can read it, and we log every time someone does.
Reviews
0 publishedNo reviews yet.
Cantina published these facts on the program's page. Researchers did not report them, and they don't count toward the BugRater grade.
Scope
21 assets| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Base AppChains | OTHER | ✓ bounty | Critical |
| Base Fault Proofs | OTHER | ✓ bounty | Critical |
| Basenames | OTHER | ✓ bounty | Critical |
| Coinbase Attestations | OTHER | ✓ bounty | Critical |
| Coinbase Smart Wallet infrastructure | OTHER | ✓ bounty | Critical |
Show all 21 assets
| Asset | Type | Eligibility | Max severity |
|---|---|---|---|
| Coinbase's validator staking infrastructure | OTHER | ✓ bounty | Critical |
| Commerce Payments | OTHER | ✓ bounty | Critical |
| DEX Aggregator | OTHER | ✓ bounty | Critical |
| EIP-7702 | OTHER | ✓ bounty | Critical |
| https://docs.base.org/base-chain/network-information/base-contracts | URL | ✓ bounty | Critical |
| https://www.coinbase.com/blog/coinbase-wrapped-btc-cbbtc-is-now-live | URL | ✓ bounty | Critical |
| https://www.coinbase.com/price/coinbase-wrapped-staked-eth | URL | ✓ bounty | Critical |
| Onchain Pass | OTHER | ✓ bounty | Critical |
| Others | OTHER | ✓ bounty | Critical |
| Spend Permissions | OTHER | ✓ bounty | Critical |
| Verified Pools | OTHER | ✓ bounty | Critical |
| Wrapped Token (ADA) | OTHER | ✓ bounty | Critical |
| Wrapped Token (DOGE) | OTHER | ✓ bounty | Critical |
| Wrapped Token (LTC) | OTHER | ✓ bounty | Critical |
| Wrapped Token (XRP) | OTHER | ✓ bounty | Critical |
| Wrapped Tokens | OTHER | ✓ bounty | Critical |