Skip to content

SECURITY.md

Latest commit

 

History

History
47 lines (30 loc) · 856 Bytes

SECURITY.md

File metadata and controls

47 lines (30 loc) · 856 Bytes
Raw

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please do NOT open a public issue.

Instead:

  • Contact maintainers privately
  • Provide a detailed report including:
    • Description of the vulnerability
    • Steps to reproduce
    • Potential impact
    • Suggested fix (if available)

Response Time

We aim to acknowledge reports within 48 hours and provide updates as progress is made.

Scope

This policy applies to:

  • Smart contracts
  • Backend services
  • APIs
  • Infrastructure configurations

Responsible Disclosure

  • Do not publicly disclose the vulnerability until it has been resolved
  • Give maintainers reasonable time to fix the issue

Security Best Practices

  • Never commit secrets
  • Use environment variables
  • Validate all external inputs
  • Follow secure coding practices