Crypto.com

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
co.mona.android GOOGLE_PLAY_APP_ID high high high critical
Get the app here: https://play.google.com/store/apps/details?id=co.mona.android You won’t need test accounts for this as it will be public facing sites for now. The app should give you the functionality to start using the MCO services.
com.monaco.mobile APPLE_STORE_APP_ID high high high critical
Get the app here - https://itunes.apple.com/us/app/monaco-card/id1262148500?ls=1&mt=8 You won’t need test accounts for this as it will be public facing sites for now. Get the MCO Cryptocurrency Card app for iOS in the link above this app should allow you to create an account and start using the Monaco services.
mco.crypto.com URL high high high critical
www.crypto.com URL high high high critical
You won’t need test accounts for this as it will be public facing sites for now.
https://github.com/crypto-com/chain SOURCE_CODE critical
This is the Crypto.com Chain Public TestNet.
https://github.com/crypto-com/chain-tx-enclave SOURCE_CODE critical
https://crypto.com/en/exchangebeta URL critical
app.mona.co URL high high high critical
https://crypto.com/en/exchange URL critical
https://crypto.com/exchange URL critical
com.defi.wallet APPLE_STORE_APP_ID medium high medium critical
https://apps.apple.com/app/crypto-com-wallet/id1512048310
com.defi.wallet GOOGLE_PLAY_APP_ID medium high medium critical
https://play.google.com/store/apps/details?id=com.defi.wallet
https://auth.crypto.com/ URL high high high critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.crypto.com URL none none none none
Anything other than www.crypto.com is out of scope for the time being.
https://github.com/crypto-com/sample-chain-wallet URL none
As this is a sample wallet only for your reference and demonstration, it is listed as out of scope.