Rarible Bug Bounty

About the program

Rarible values the work done by security researchers in improving the security of our products and service offerings. We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community to participate in our responsible reporting process.

The Scope / Out of Scope

Testing is only authorized on the targets listed as in scope (see the vulnerable target list). Any domain/property of Rarible not listed in the targets section is out of scope. This includes any/all subdomains not listed above. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to Rarible, you can report it to security@rarible.com. However, be aware that it is ineligible for rewards or points-based compensation.