Browse / bitaccess
bitaccess
4disclosed reports
85known subdomains
Attack surface: 85 known subdomains
85subdomains across 2 root domains
Not every host here is in scope. Check the program's policy before testing. Last updated 2026-11-13.
What gets reported to bitaccess
Most upvoted reports
AllValidInformativeN/ADuplicate
- BYASSING OTP VerificationViolation of Secure Design Principles34 votes
- EXTREMELY URGENT: Missing control of bitcoin amount when selling bitcoin allows a user to withdraw any amount of money, unrestricted.Improper Access Control - Generic12 votes
- Missing Rate limiting for sensitive actions (like "forgot password") and reCaptcha error. Violation of Secure Design Principles4 votes