Blockchain

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.blockchain.com URL critical
*.dev.blockchain.info URL critical
Partially deprecated domain. Severity may be limited. Pre-production system. Severity may be limited.
*.europe-west1.dev.blockchain.info URL critical
Hardware and software for the Blockchain Lockbox hardware wallet OTHER critical
Merchant App (Android): https://play.google.com/store/apps/details?id=info.blockchain.merchant OTHER critical
Merchant App (iOS): https://itunes.apple.com/us/app/blockchain-merchant/id947009571 OTHER critical
Wallet App (Android): https://play.google.com/store/apps/details?id=piuk.blockchain.android OTHER critical
Wallet App (iOS): https://itunes.apple.com/us/app/blockchain-wallet-bitcoin/id493253309 OTHER critical
api.blockchain.com URL critical
api.blockchain.info URL critical
Partially deprecated domain. Severity may be limited.
bci-ads.blockchain.info URL critical
blog.blockchain.info URL critical
Partially deprecated domain. Severity may be limited
consul.dev.blockchain.info URL critical
docs.blockchain.com URL critical
horizon.blockchain.info URL critical
login.blockchain.com URL critical
mailer1.blockchain.com URL critical
mailer2.blockchain.com URL critical
mailer3.blockchain.com URL critical
pit.*.blockchain.info URL critical
pit.blockchain.com URL critical
prod.blockchain.com URL critical
wallet-helper.blockchain.com URL critical
ws.blockchain.info URL critical
www.blockchain.com URL critical
www.blockchain.info URL critical
Partially deprecated domain. Severity may be limited.
exchange.blockchain.com URL high high high critical
ws.prod.blockchain.info URL high high high critical
Exchange API. See https://exchange.blockchain.com/api/#introduction

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
blog.blockchain.com URL none
campaigns.blockchain.com URL none
email-clicks.blockchain.com URL none
jamf.blockchain.com URL none
support.blockchain.com URL none