Coinbase: Email leak in transcations in Android app

ID H1:126376
Type hackerone
Reporter bountypls
Modified 2016-05-17T13:44:25


When a user received bitcoin from another Coinbase user, it was possible for the recipient to see the sender's email address in the transactions list in the Android app, despite the fact that users are told their emails would not be shown to other users.