Target Policy

https://hackerone.com/yuga_labs?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• http://*.yuga.com

  WILDCARD

  critical
• http://*.otherside.xyz

  WILDCARD

  critical
• http://*.meebits.app

  WILDCARD

  critical
• http://*.cryptopunks.app

  WILDCARD

  critical
• http://*.mdvmm.xyz

  WILDCARD

  critical
• http://*.boredapeyachtclub.com

  WILDCARD

  critical
• http://*.yugalabs.io

  WILDCARD

  critical
• https://dookeydash.xyz/

  ---

  Yuga Labs, in addition to our standard vulnerability criteria, is interested in exploits affecting Dookey Dash which would allow an attacker to bypass cheat detection systems and server-side issues leading to fraudulent scores.

  URL

  critical
• https://dookeydash.com/

  ---

  Yuga Labs, in addition to our standard vulnerability criteria, is interested in exploits affecting Dookey Dash which would allow an attacker to bypass cheat detection systems and server-side issues leading to fraudulent scores.

  URL

  critical
• hv-mtl.com

  URL

  critical
• dookeydash.com

  ---

  Yuga Labs, in addition to our standard vulnerability criteria, is interested in exploits affecting Dookey Dash which would allow an attacker to bypass cheat detection systems and server-side issues leading to fraudulent scores.

  URL

  critical
• 937011954453721119

  ---

  Meebits Discord Server
  Canary Channel ID: 999376585037713568

  OTHER

  critical
• *.mdvmm.xyz

  WILDCARD

  critical
• 831287358355275877

  ---

  Bored Ape Yacht Club Discord Server
  Canary Channel ID: 999376248943943813

  OTHER

  critical
• 961114489414094898

  ---

  Otherside Discord Server
  Canary Channel ID: 999375944731082923

  OTHER

  critical
• 329381334701178885

  ---

  CryptoPunks Discord Server
  Canary Channel ID: 999377510355718245

  OTHER

  critical
• *.wenewmoments.com

  WILDCARD

  low
• *.10ktf.com

  WILDCARD

  critical
• *.boredapeyachtclub.com

  WILDCARD

  critical
• *.cryptopunks.app

  WILDCARD

  critical
• *.meebits.app

  WILDCARD

  critical
• *.otherside.xyz

  ---

  NOTE: all hosts with CNAME records pointed to out-of-scope, or partner websites, will be considered out of scope. This includes "otk.otherside.xyz", and additionally, all development domains that are not explicitly in scope are considered out of scope.

  WILDCARD

  critical
• *.yugalabs.io

  WILDCARD

  critical
• *.yuga.com

  WILDCARD

  critical

Target Scope Domains

• 10ktf.com
• boredapeyachtclub.com
• cryptopunks.app
• dookeydash.com
• dookeydash.xyz
• hv-mtl.com
• mdvmm.xyz
• meebits.app
• otherside.xyz
• wenewmoments.com
• yuga.com
• yugalabs.io

• 77 Subdomains
• 88 Endpoints
• Download wordlist

---

Last Finished Scan:

---