Please report security issues privately, not as a public GitHub issue:

• Email secops@web3.foundation

Useful things to include: affected version or commit, what an attacker gains, and steps to reproduce.

We'll acknowledge on a best-effort basis. There is no bug bounty for this project, and no guaranteed response time — see CONTRIBUTING.md for how this repo is maintained.