Bug bounty program
EX
Exodus
Most upvoted reports3
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Cache Poisoning DoS on downloads.exodus.comAnalysed#1173153 | Denial of Service | 2021-12-22 | – | 110 |
| Exposed Configuration Files at https://www.exodus.io/keybase.txt#1027949 | No weakness recorded | 2020-11-06 | – | 18 |
| 2 Cache Poisoning Attack Methods Affect Core Functionality www.exodus.com#1581454 | No weakness recorded | 2022-06-06 | – | 7 |
Subdomains202
| Name | Scope | First seen |
|---|---|---|
| a.exodus.io | In scope | 2026-11-14 |
| algo.a.exodus.io | In scope | 2026-11-14 |
| algo-api.a.exodus.ioapi | In scope | 2026-11-14 |
| atom4.a.exodus.io | In scope | 2026-11-14 |
| avax-c.a.exodus.io | In scope | 2026-11-14 |
| bitcoin.a.exodus.io | In scope | 2026-11-14 |
| bitcoincashnode.a.exodus.io | In scope | 2026-11-14 |
| bitcoinnew-d.a.exodus.io | In scope | 2026-11-14 |
| bitcoinsv.a.exodus.io | In scope | 2026-11-14 |
| bsc.a.exodus.io | In scope | 2026-11-14 |
| cardano.a.exodus.io | In scope | 2026-11-14 |
| crypto-pill-playground.a.exodus.io | In scope | 2026-11-14 |
| crypto-pill-playground-main.a.exodus.io | In scope | 2026-11-14 |
| dash.a.exodus.io | In scope | 2026-11-14 |
| devops-handbook.a.exodus.io | In scope | 2026-11-14 |
| dogecoin.a.exodus.io | In scope | 2026-11-14 |
| eos.a.exodus.io | In scope | 2026-11-14 |
| etc.a.exodus.io | In scope | 2026-11-14 |
| eth.a.exodus.io | In scope | 2026-11-14 |
| exodus-javascript-sdk.a.exodus.io | In scope | 2026-11-14 |
| exokit.a.exodus.io | In scope | 2026-11-14 |
| fantom.a.exodus.io | In scope | 2026-11-14 |
| fiat-d.a.exodus.io | In scope | 2026-11-14 |
| vgs.fiat-d.a.exodus.io | In scope | 2026-11-14 |
| vgs.fiat.a.exodus.io | In scope | 2026-11-14 |
| getc.a.exodus.io | In scope | 2026-11-14 |
| geth.a.exodus.io | In scope | 2026-11-14 |
| geth-quorum-d.a.exodus.io | In scope | 2026-11-14 |
| harmony.a.exodus.io | In scope | 2026-11-14 |
| hedera.a.exodus.io | In scope | 2026-11-14 |
| kibona.a.exodus.io | In scope | 2026-11-14 |
| litecoin.a.exodus.io | In scope | 2026-11-14 |
| neo-mag.a.exodus.io | In scope | 2026-11-14 |
| ont.a.exodus.io | In scope | 2026-11-14 |
| ontexplorer.a.exodus.io | In scope | 2026-11-14 |
| polygon.a.exodus.io | In scope | 2026-11-14 |
| pricing.a.exodus.io | In scope | 2026-11-14 |
| qtum.a.exodus.io | In scope | 2026-11-14 |
| raven.a.exodus.io | In scope | 2026-11-14 |
| ripple.a.exodus.io | In scope | 2026-11-14 |
| safeguard.a.exodus.io | Listed out of scope | 2026-11-14 |
| scam-hitlist.a.exodus.io | In scope | 2026-11-14 |
| simulation.a.exodus.io | In scope | 2026-11-14 |
| solana.a.exodus.io | In scope | 2026-11-14 |
| solana-qn-d.a.exodus.io | In scope | 2026-11-14 |
| substrate-api-sidecar.a.exodus.ioapi | In scope | 2026-11-14 |
| support-helpers.a.exodus.io | Listed out of scope | 2026-11-14 |
| tezos.a.exodus.io | In scope | 2026-11-14 |
| vet.a.exodus.io | In scope | 2026-11-14 |
| vgs-fiat-d.a.exodus.io | In scope | 2026-11-14 |
| web-dapps.a.exodus.io | In scope | 2026-11-14 |
| web-dapps-test.a.exodus.iotest | In scope | 2026-11-14 |
| web3.a.exodus.io | In scope | 2026-11-14 |
| xmr.a.exodus.io | In scope | 2026-11-14 |
| xo-docs.a.exodus.io | In scope | 2026-11-14 |
| xo-docs-s.a.exodus.io | In scope | 2026-11-14 |
| zilliqa.a.exodus.io | In scope | 2026-11-14 |
| agents.exodus.io | In scope | 2026-11-14 |
| ark.exodus.io | In scope | 2026-11-14 |
| assets.exodus.io | In scope | 2026-11-14 |
| dcr1-us-east-1.assets.exodus.io | In scope | 2026-11-14 |
| aws.exodus.io | In scope | 2026-11-14 |
| mgmt.aws.exodus.io | In scope | 2026-11-14 |
| prod.aws.exodus.io | In scope | 2026-11-14 |
| neo.prod.aws.exodus.io | In scope | 2026-11-14 |
| price-feed.prod.aws.exodus.io | In scope | 2026-11-14 |
| sandbox.aws.exodus.iotest | In scope | 2026-11-14 |
| stage.aws.exodus.iostaging | In scope | 2026-11-14 |
| backup-d.exodus.iodata | In scope | 2026-11-14 |
| bitcoin.exodus.io | In scope | 2026-11-14 |
| bitcoincash.exodus.io | In scope | 2026-11-14 |
| bitcoingold.exodus.io | In scope | 2026-11-14 |
| bitcoinsv.exodus.io | In scope | 2026-11-14 |
| blog.exodus.io | In scope | 2026-11-14 |
| compound.exodus.io | In scope | 2026-11-14 |
| master.compound.exodus.io | In scope | 2026-11-14 |
| dash.exodus.io | In scope | 2026-11-14 |
| dash-insight.exodus.io | In scope | 2026-11-14 |
| dash-insight-new.exodus.io | In scope | 2026-11-14 |
| deepview.exodus.io | In scope | 2026-11-14 |
| dev.exodus.iodev | In scope | 2026-11-14 |
| jenkins.dev.exodus.ioci, dev | In scope | 2026-11-14 |
| bastion.devops.exodus.io | In scope | 2026-11-14 |
| digibyte.exodus.io | In scope | 2026-11-14 |
| dogecoin.exodus.io | In scope | 2026-11-14 |
| downloads.exodus.io | In scope | 2026-11-14 |
| eos.exodus.io | In scope | 2026-11-14 |
| etc.exodus.io | In scope | 2026-11-14 |
| eth.exodus.io | In scope | 2026-11-14 |
| ethereum.exodus.io | In scope | 2026-11-14 |
| ethereumclassic.exodus.io | In scope | 2026-11-14 |
| exchange.exodus.iomail | In scope | 2026-11-14 |
| status.exchange.exodus.iomail, monitoring | In scope | 2026-11-14 |
| www.exchange.exodus.iomail | In scope | 2026-11-14 |
| factom.exodus.io | In scope | 2026-11-14 |
| fusion.exodus.io | In scope | 2026-11-14 |
| get.exodus.io | Listed out of scope | 2026-11-14 |
| help.exodus.io | In scope | 2026-11-14 |
| hund.exodus.io | In scope | 2026-11-14 |
| insight-btc0.exodus.io | In scope | 2026-11-14 |
195 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.