Bug Bounty
We take security seriously. Our bug bounty program offers Bitcoin rewards to anyone who discovers a new vulnerability in our code.
Find our flaws
What are we looking for?
Cross-site scripting
Cross-site request forgery
Remote code execution
Click-jacking
Code injection
Leaks of sensitive data
How it works
In order to claim a bug bounty, you must:
- Discover an entirely unknown vulnerability.
- Alert us before posting the bug anywhere else – and give us sufficient time to patch the issue.
- Not use the exploit to steal money or data from CoinJar or its customers. If the exploit requires account access, you must use your own.
If you have any doubts or questions, email us at security@coinjar.com.
Ineligible bounties
We don’t reward bounties for any vulnerabilities not under our direct control. For example:
- Social engineering
- Issues requiring physical access to hardware
- Vulnerabilities in 3rd party software (Ruby, nginx, etc)
- Denial of Service
- Usability issues
Report a bug
Please fill out the form below to report an issue. Include as much detail about the exploit as you can and a BTC address for us to send the reward to. Our Security Team will get back to you as soon as possible.CoinJar
Company
Support
Legal
Crypto on CoinJar
Your information is handled in accordance with CoinJar’s .
Copyright © 2025 CoinJar, Inc. All rights reserved.
CoinJar, Inc. is a registered Money Services Business with FinCEN and licensed as a money transmitter, NMLS #2492913. For a list of states in which CoinJar, Inc. is licensed or authorized to operate, please visit . In certain other states, money transmission services are provided by Cross River Bank, Member FDIC.
This site is protected by reCAPTCHA and the and apply.
CoinJarGet the app.
