Target Policy

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• watchgod.polygon.technology

  URL

  critical
• https://github.com/maticnetwork/bor

  ---

  #Bor
  The Bor node or the Block Producer implementation is basically the sidechain operator. The sidechain VM is EVM-compatible.

  SOURCE_CODE

  critical
• https://agglayer-test.polygon.technology

  ---

  https://github.com/0xPolygon/agglayer/blob/main/docs/openrpc.json

  URL

  critical
• https://burn.polygon.technology/

  URL

  critical
• bridge-api.matic.network

  URL

  critical
• https://wallet.polygon.technology/

  URL

  critical
• https://sentinel.matic.network/

  URL

  critical
• https://bridge-api-node.matic.network

  URL

  critical
• https://mapper.polygon.technology/

  URL

  critical
• https://bridge-api.matic.network

  URL

  critical
• https://watchgod.polygon.technology/

  URL

  critical
• https://open-api.polygon.technology/

  URL

  critical
• https://faucet.polygon.technology/

  URL

  critical
• https://mnt.matic.network

  URL

  critical
• https://bridge-explorer.polygon.technology/

  URL

  critical
• staking.polygon.technology

  URL

  critical
• https://github.com/maticnetwork/contracts

  ---

  #Contracts
  This repository contains the smart contracts that power Matic Network

  SOURCE_CODE

  none
• faucet.polygon.technology

  URL

  critical
• *.polygon.technology

  ---

  This domain is currently undergoing an overhaul therefore temporarily disabled for bounties.

  URL

  none
• https://multisig-wallet.polygon.technology/

  URL

  critical
• *.api.matic.network

  URL

  critical
• ecosystem.polygon.technology

  URL

  medium
• https://staking-api.polygon.technology/

  URL

  critical
• https://github.com/0xPolygon/chain-indexer-framework

  SOURCE_CODE

  critical
• ecosystem-api.polygon.technology

  URL

  medium
• api-gateway.polygon.technology

  API

  critical
• gasstation.polygon.technology/

  API

  high
• https://github.com/0xPolygon/heimdall-v2

  SOURCE_CODE

  critical
• portal.polygon.technology

  ---

  Here are just some of things you will be able to to do with Polygon Portal:

  Bridge your assets via Socket bridge and a range of third-party bridges;
  Manage your assets and token lists;
  Use the Refuel Gas feature to purchase MATIC or ETH for gas on the destination chain;
  Leverage developer tools to help you build your dream dApp;
  Swap assets easily with third-party DEXs.

  URL

  critical
• wallet.polygon.technology

  URL

  critical
• bridge-explorer.polygon.technology

  URL

  critical
• burn.polygon.technology

  URL

  critical
• mapper.polygon.technology

  URL

  critical
• open-api.polygon.technology

  URL

  critical
• https://github.com/maticnetwork/heimdall

  SOURCE_CODE

  none
• *.matic.network

  WILDCARD

  none
• https://github.com/0xPolygon/auto-claim-service

  SOURCE_CODE

  high
• staking-api.polygon.technology

  URL

  critical
• https://github.com/maticnetwork/matic-cli

  SOURCE_CODE

  none
• faucet-api.polygon.technology/

  API

  high
• api-polygon-tokens.polygon.technology/

  API

  high
• balance-api.polygon.technology/

  API

  high
• https://github.com/0xPolygon/proof-generation-api

  SOURCE_CODE

  high
• https://github.com/0xPolygon/lxly.js

  SOURCE_CODE

  high
• https://github.com/0xPolygon/static

  SOURCE_CODE

  high

Target Scope Domains

• agglayer-test.polygon.technology
• api.matic.network
• bridge-api-node.matic.network
• bridge-api.matic.network
• bridge-explorer.polygon.technology
• burn.polygon.technology
• ecosystem-api.polygon.technology
• ecosystem.polygon.technology
• faucet.polygon.technology
• mapper.polygon.technology
• mnt.matic.network
• multisig-wallet.polygon.technology
• open-api.polygon.technology
• portal.polygon.technology
• sentinel.matic.network
• staking-api.polygon.technology
• staking.polygon.technology
• wallet.polygon.technology
• watchgod.polygon.technology

• 16 Subdomains
• 115 Endpoints
• Download wordlist

Last Finished Scan: