Target Policy

https://hackerone.com/monolith?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• All Other Assets in Scope

  ---

  Please do not submit on this asset. This is a bounty category header only!

  OTHER

  critical
• kyc-events.production.tkn.zone

  URL

  critical
• card-onboarding.production.tkn.zone

  URL

  critical
• https://github.com/tokencard/contracts

  SOURCE_CODE

  critical
• api.production.tkn.zone

  URL

  critical
• Android & IOS Apps

  ---

  Please do submit on this asset. This is a bounty category header only!

  OTHER

  critical
• io.tokencard.app.android

  GOOGLE_PLAY_APP_ID

  critical
• io.tokencard.app.ios

  APPLE_STORE_APP_ID

  critical

Target Scope Domains

• api.production.tkn.zone
• card-onboarding.production.tkn.zone
• kyc-events.production.tkn.zone

• 3 Subdomains
• 3 Endpoints
• Download wordlist

---

Last Finished Scan:

---