Found a security issue? Tell us. We reward responsible reports that help keep Upbit safe.

In scope

• The web exchange, wallet pages and account sign-in.
• Open API endpoints and authentication.

Out of scope

• Denial-of-service testing and social engineering of staff or users.
• Reports that need physical access to a device.

How to report

• Describe the issue, the steps to reproduce it and its impact. Do not include personal data of other users.