Explore the Best Bitcoin and Crypto Trading Platform. CoinSwitch is India's largest crypto trading app, offers a seamless experience for Buying & Selling Bitcoin, Ethereum, USDT and 400+ cryptos. Start trading and investing in cryptocurrency today!!
External Program
Submit bugs directly to this organization
CoinSwitch is commited to security. We reward reporters for the responsible disclosure of in-scope issues and exploitation techniques.
If you discover a bug, we appreciate your cooperation in responsibly investigating and reporting it to us so that we can address it as soon as possible.
To allow highly skilled external security researchers to submit their findings to us through a proper vulnerability disclosure process.
We encourage and respect the hacker community and ask that you act in good faith when working with us. Please abide by the following when participating in our program:
As our platform lays out, please read and follow the Vulnerability Disclosure Guidelines.
Limit testing to accounts you own and do not impact other users. If you do encounter any user data or program data, including but not limited to usernames, passwords, or vulnerability information, please report it to us immediately and stop testing right away.
When testing use the minimal possible POC to validate a vulnerability; in cases when it may impact systems or users, ask permission first. No matter the case, do not damage or leave a system in a more vulnerable state that when you uncovered it.
We believe in transparency about our security, so any valid vulnerabilities discovered are always publicly disclosed once confirmed and resolved.
Only reports that meet the following requirements are eligible to receive a monetary reward:
Depending on their impact, issues may qualify for a monetary reward; all reports are reviewed on a case-by-case basis and any report that results in a change being made will at a minimum receive Hall of Fame recognition.
When researching security issues, especially those which may compromise the privacy of others, you must use test accounts in order to respect our users' privacy. Accessing private information of other users, performing actions that may negatively affect other users (e.g., spam, denial of service), or sending reports from automated tools without verifying them will immediately disqualify the report, and may result in additional steps being taken.
The following issues are outside the scope of our vulnerability rewards program (either ineligible or false positives):