# Poloniex Web & API: bug bounty program on HackenProof

> Poloniex Web & API is a bug bounty program on HackenProof. 11 assets are listed in scope, 11 of them bounty-eligible.

- **Company:** Poloniex Web & API
- **Platform:** HackenProof
- **Program page:** https://hackenproof.com/programs/poloniex-web-and-api
- **Pays bounties:** yes
- **Submissions:** open
- **Launched:** March 15, 2024
- **BugRater grade:** not graded yet (fewer than three reviewers)
- **BugRater page:** https://bugrater.com/programs/poloniex-web-and-api

## Scope

As imported from HackenProof on October 21, 2026: 11 assets in scope (11 bounty-eligible), 0 out of scope. The policy page is the authority.

- `api-docs.poloniex.com` (URL): in scope, bounty-eligible, max severity critical
- `api.poloniex.com` (URL): in scope, bounty-eligible, max severity critical
- `api2.poloniex.com` (URL): in scope, bounty-eligible, max severity critical
- `https://poloniex.com/` (URL): in scope, bounty-eligible, max severity critical
- `sapi.poloniex.com` (URL): in scope, bounty-eligible, max severity critical
- `tms.polo-static.com` (URL): in scope, bounty-eligible, max severity critical
- `v3.polo-static.com` (URL): in scope, bounty-eligible, max severity critical
- `wgc.polo-static.com` (URL): in scope, bounty-eligible, max severity critical
- `ws-web.poloniex.com` (URL): in scope, bounty-eligible, max severity critical
- `ws.poloniex.com` (URL): in scope, bounty-eligible, max severity critical
- `x-api.poloniex.com` (URL): in scope, bounty-eligible, max severity critical

---

Generated October 25, 2026 from BugRater data. Platform figures are the platform's own; grades and reviews are BugRater's. Agents can check targets against this scope with the check_scope tool at https://bugrater.com/mcp.