EN
HackerOneOffers Rewards
Enjin
Enjin appears to run a bug bounty or vulnerability disclosure program on HackerOne. It also offers rewards for valid security reports.
Created: February 15, 2026
Last Updated: October 5, 2026
In Scope (6)
*.enjinusercontent.com ( This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website. )
Enjin Blockchain ( The Enjin Blockchain refers to either the Enjin Relaychain or the Enjin Matrixchain. It does not refer to other (community-operated) Matrixchains. Issues originating from Substrate are notifiable but ineligible for a bounty as Enjin Blockchain will automatically work towards scheduling upgrades from Substrate, which includes new features; bug fixes; and security fixes. )
com.enjin.mobile.wallet ( https://apps.apple.com/us/app/enjin-cryptocurrency-wallet/id1349078375 **Background**
The Enjin Wallet is a secure, feature-packed, and convenient blockchain asset wallet built for traders, gamers, and developers. )
com.enjin.mobile.wallet ( https://play.google.com/store/apps/details?id=com.enjin.mobile.wallet **Background**
The Enjin Wallet is a secure, feature-packed, and convenient blockchain asset wallet built for traders, gamers, and developers. )
nft.io ( You can also test, for free, on [canary.nft.io](https://canary.nft.io). )
platform.enjin.io
Out of Scope (7)
assets.enjin.io ( This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website. )
cdn.enjin.io ( This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website. )
cdn.nft.io ( This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website. )
docs.enjin.io ( This asset is out-of-scope as a third-party service (ReadMe) is responsible for the running and maintenance of this website. )
enj.in ( This asset is out-of-scope as a third-party service is responsible for the running and maintenance of this website. )
enjin.io ( This asset is out-of-scope as a third-party service (Webflow) is responsible for the running and maintenance of this website. )
support.enjin.io ( This asset is out-of-scope. Testing on this asset is strictly prohibited. )