Browse / Coinbase

Coinbase

See its reports on the map

Attack surface: 1,044 known subdomains

Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.

What gets reported to Coinbase

• Misconfiguration20
• Authentication15
• Information Disclosure11
• Cross-Site Request Forgery7
• Other weaknesses7
• Business Logic5

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Create Multiple Account Using Similar X-CSRF tokenN/AViolation of Secure Design Principles
   5 votes
2. An adversary can overwhelm the resources by automating Forgot password/Sign Up requestsN/AImproper Authentication - Generic
   4 votes
3. The 'Create a New Account' action is vulnerable to CSRFN/ACross-Site Request Forgery (CSRF)
   4 votes
4. Open redirect on sign in N/AOpen Redirect · low
   3 votes
5. Cookie not secureN/AMisconfiguration
   1 votes
6. CSRF bug on password changeN/ACross-Site Request Forgery (CSRF)