Bug bounty program
OpenSea Managed Bug Bounty Program
- Platform
- Bugcrowd
- Bounties
- Pays
- Assets in scope
- 11
- Disclosed reports
- 0
- Subdomains
- 78
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains78
| Name | Scope | First seen |
|---|---|---|
| ai.opensea.io | Not in the scope | 2026-11-14 |
| api.opensea.ioapi | Not in the scope | 2026-11-14 |
| api2.opensea.ioapi | Not in the scope | 2026-11-14 |
| applink.opensea.io | Not in the scope | 2026-11-14 |
| auth.opensea.ioauth | Not in the scope | 2026-11-14 |
| blog.opensea.io | Not in the scope | 2026-11-14 |
| blog-migration.opensea.io | Not in the scope | 2026-11-14 |
| blog-test.opensea.iotest | Not in the scope | 2026-11-14 |
| blog-v2.opensea.io | Not in the scope | 2026-11-14 |
| blog-v3.opensea.io | Not in the scope | 2026-11-14 |
| bvco9l6.opensea.io | Not in the scope | 2026-11-14 |
| castle.opensea.io | Not in the scope | 2026-11-14 |
| coachella-redemption.opensea.io | Not in the scope | 2026-11-14 |
| community-standards.opensea.io | Not in the scope | 2026-11-14 |
| cp.opensea.io | Not in the scope | 2026-11-14 |
| creatures-api.opensea.ioapi | Not in the scope | 2026-11-14 |
| cryptofighters.opensea.io | Not in the scope | 2026-11-14 |
| cryptokitties.opensea.io | Not in the scope | 2026-11-14 |
| cryptosaga.opensea.io | Not in the scope | 2026-11-14 |
| csp.opensea.io | Not in the scope | 2026-11-14 |
| deals.opensea.io | Not in the scope | 2026-11-14 |
| dev-storage.opensea.iodev | Not in the scope | 2026-11-14 |
| developers.opensea.io | Not in the scope | 2026-11-14 |
| docs.opensea.io | Not in the scope | 2026-11-14 |
| dworld.opensea.io | Not in the scope | 2026-11-14 |
| email.opensea.io | Not in the scope | 2026-11-14 |
| features-proxy.opensea.io | Not in the scope | 2026-11-14 |
| gql.opensea.ioapi | Not in the scope | 2026-11-14 |
| graphql.opensea.ioapi | Not in the scope | 2026-11-14 |
| help.opensea.io | Not in the scope | 2026-11-14 |
| hotpotato.opensea.io | Not in the scope | 2026-11-14 |
| info.opensea.io | Not in the scope | 2026-11-14 |
| ipfs.opensea.io | Not in the scope | 2026-11-14 |
| api.k8s.opensea.ioapi, tools | Not in the scope | 2026-11-14 |
| argo.k8s.opensea.ioci, tools | Not in the scope | 2026-11-14 |
| atlantis.k8s.opensea.iotools | Not in the scope | 2026-11-14 |
| www.atlantis.k8s.opensea.iotools | Not in the scope | 2026-11-14 |
| flower.k8s.opensea.iotools | Not in the scope | 2026-11-14 |
| previews.k8s.opensea.iotools | Not in the scope | 2026-11-14 |
| learn.opensea.io | Not in the scope | 2026-11-14 |
| ledgerlegends.opensea.io | Not in the scope | 2026-11-14 |
| links.opensea.io | Not in the scope | 2026-11-14 |
| mail.opensea.iomail | Not in the scope | 2026-11-14 |
| matic.opensea.io | Not in the scope | 2026-11-14 |
| mcp.opensea.io | In scope | 2026-11-14 |
| mcp-beta.opensea.iostaging | Not in the scope | 2026-11-14 |
| mobile-beta.opensea.iostaging | Not in the scope | 2026-11-14 |
| mq.opensea.io | Not in the scope | 2026-11-14 |
| mythereum.opensea.io | Not in the scope | 2026-11-14 |
| next.opensea.io | Not in the scope | 2026-11-14 |
| oasis-lounge.opensea.io | Not in the scope | 2026-11-14 |
| open-graph.opensea.io | Not in the scope | 2026-11-14 |
| partner.opensea.io | Not in the scope | 2026-11-14 |
| partners.opensea.io | Not in the scope | 2026-11-14 |
| partners-v2.opensea.io | Not in the scope | 2026-11-14 |
| partnerships.opensea.io | Not in the scope | 2026-11-14 |
| pro.opensea.io | Not in the scope | 2026-11-14 |
| api.pro.opensea.ioapi | Not in the scope | 2026-11-14 |
| features.pro.opensea.io | Not in the scope | 2026-11-14 |
| stream.pro.opensea.io | Not in the scope | 2026-11-14 |
| rinkeby.opensea.io | Not in the scope | 2026-11-14 |
| rinkeby-api.opensea.ioapi | Not in the scope | 2026-11-14 |
| rinkeby-storage.opensea.io | Not in the scope | 2026-11-14 |
| static.opensea.io | Not in the scope | 2026-11-14 |
| status.opensea.iomonitoring | Not in the scope | 2026-11-14 |
| storage.opensea.io | Not in the scope | 2026-11-14 |
| studio.opensea.io | Not in the scope | 2026-11-14 |
| support.opensea.io | Not in the scope | 2026-11-14 |
| surveys.opensea.io | Not in the scope | 2026-11-14 |
| testnets.opensea.io | Not in the scope | 2026-11-14 |
| testnets-api.opensea.ioapi | Not in the scope | 2026-11-14 |
| testnets-wallets.opensea.io | Not in the scope | 2026-11-14 |
| wallet.opensea.io | In scope | 2026-11-14 |
| privy.wallet.opensea.io | Not in the scope | 2026-11-14 |
| wallets.opensea.io | Not in the scope | 2026-11-14 |
| privy.wallets.opensea.io | Not in the scope | 2026-11-14 |
| webauth.opensea.io | Not in the scope | 2026-11-14 |
| www.opensea.io | Not in the scope | 2026-11-14 |
2 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.