CoinMate.io Program Statistics

View program

3 total issues disclosed

$100 total paid publicly

Most disclosed (1 disclosures) — Improper Authentication - Generic

Disclosed Reports

Report Title Vulnerability Type Disclosed By Severity Disclosed on
Adding phone number to profile By OTP brute forcing Insecure Storage of Sensitive Information ganesh_reddy Medium 2026-08-08
POST /api/bitcoinWithdrawalFees returns financial data without authentication despite being documented as a USER OPERATION (private endpoint) Improper Authentication - Generic glferreira-devsecops Medium 2026-05-20
HMAC signature verification omits endpoint and payload allowing request forgery on CoinMate API Missing Required Cryptographic Step glferreira-devsecops Low 2026-05-20