Security
Vulnerability disclosure
How to report a vulnerability and what happens next.
Channels
A DM to @getberrier to open a private channel. A dedicated address will replace this at launch.
What to include
- Affected contract and function.
- Impact and preconditions.
- A proof of concept, ideally a Foundry test.
What happens next
- Acknowledgement within 48 hours.
- Triage and severity.
- Fix, review and deployment.
- Public write-up with credit if you want it.
Coordinated disclosure timeline
Details stay private until a fix is live or 90 days pass, whichever comes first, unless agreed otherwise.
Acknowledgements
None yet.