Interactive previewDemo data only. Sign in as any example account and try anything. Resets nightly.Launching soon
BESCBESC ecosystem
Join
BountiesCompetitionsResearchersPricingResources
Sign inLaunch a program
All programs

Nimbus Wallet

Live
by Nimbus Wallet Inc.

Self-custodial smart wallet with passkey recovery.

WalletTypeScriptBESC HyperchainEthereumPolygon
Max bounty
$100,000
Unfunded
Submit report
OverviewScope3Impacts & severity5Rules & policiesTrack recordVersions1

Assets in scope

Only these assets are eligible. Each report selects exactly one.

IDAssetTypeTarget
NMB-1
Web wallet
Website / app
https://wallet.nimbus.example
NMB-2
iOS / Android app
Latest store release only.
Mobile
com.nimbus.wallet
NMB-3
SmartAccount factory
Smart contractPolygon
0x99990000…00000abc

Out-of-scope & exclusions

Any out-of-scope closure must cite one of these ids.

  • EXCL-1Attacks requiring physical access to an unlocked device.
  • EXCL-2Attacks requiring a rooted or jailbroken device.
  • EXCL-3Clickjacking on pages with no sensitive actions.
  • EXCL-4Missing security headers without demonstrated impact.