Coinbase · Report #126376
Email leak in transcations in Android app
Validstatus
$500bounty
11upvotes
17 May 2016disclosed
Summary
When a user received bitcoin from another Coinbase user, it was possible for the recipient to see the sender's email address in the transactions list in the Android app, despite the fact that users are told their emails would not be shown to other users.
test
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.