All potential vulnerability reports can be submitted via the HackerOne platform.
The HackerOne platform allows us to have a centralized and single reporting source for us to deliver optimized SLA's and results. All reports submitted to the platform are triaged around the clock by our team of Coinbase engineers with domain knowledge, assuring the best quality of review.
For more information on reporting vulnerabilities and our HackerOne bug bounty program, view our security program policies.