Browse / CoinMate.io

CoinMate.io

See its reports on the map

What gets reported to CoinMate.io

• Information Disclosure1
• Authentication1
• Cryptography1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Adding phone number to profile By OTP brute forcingInsecure Storage of Sensitive Information · medium
   $100114 votes
2. POST /api/bitcoinWithdrawalFees returns financial data without authentication despite being documented as a USER OPERATION (private endpoint)Improper Authentication - Generic · medium
   93 votes
3. HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate APIMissing Required Cryptographic Step · low
   66 votes