Currently supporting the latest version on the main branch.
| Version | Supported |
|---|---|
| main | ✅ |
| < main | ❌ |
We take security seriously. If you discover a security vulnerability, please follow these steps:
- DO NOT create a public GitHub issue
- Send a detailed report to the repository maintainers:
- Use GitHub's "Security" tab to report vulnerabilities privately
- Or email: security@[your-domain].com (replace with actual contact)
- Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
When contributing to this project:
- Never commit
.envfiles - Use
.env.exampleas a template - Keep API keys and private keys secure
- Follow Solidity best practices
- Be aware of common vulnerabilities:
- Reentrancy attacks
- Integer overflow/underflow
- Front-running
- Access control issues
- Regularly update dependencies
- Review security advisories
- Run
npm auditperiodically
- All code must be reviewed before merging
- Security-sensitive changes require extra scrutiny
- Test thoroughly on testnets before mainnet
We appreciate responsible disclosure and will acknowledge security researchers who help improve our project's security.