BC Bugcrowd LIVE
Immutable Bug Bounty
up to$10,000
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- full
7 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://api.immutable.com | api | · | · | 2026-09-20 |
https://api.x.immutable.com/ | api | · | · | 2026-09-20 |
https://auth.immutable.com | api | · | · | 2026-09-20 |
https://hub.immutable.com/ | domain | · | · | 2026-09-20 |
https://passport.immutable.com/ | domain | · | · | 2026-09-20 |
https://play.immutable.com | domain | · | · | 2026-09-20 |
https://github.com/immutable/ts-immutable-sdk/tree/main/packages/passport/ | other | · | · | 2026-09-20 |
8 out of scope — black ICE, don't touch
*.dev.x.immutable.com, *.sandbox.x.immutable.com, *.dev.x.immutable.com, *.sandbox.imtbl.com, *.dev.imtbl.com, *.ropsten.x.immutable.com, ropsten.imx.community (see brief for exceptions)other*.godsunchained.comother*.gogbackend.comother*.guildofguardians.comotherAny data exposure bug that are classified as Public Data such as Ethereum Wallet Address, NFT Purchase activity, or other public blockchain activity.otherAnything that does not belong to Immutableothergodsunchained.comothergogbackend.comother
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.