SECURITY & REPORTS
Report a problem safely.
What to include
- A short title and impact summary.
- Which app, version/commit, operating system and network you used.
- Minimal reproduction steps and redacted logs or screenshots.
- Whether the issue affects confidentiality, integrity, availability, funds, peers or personal data.
Safe contact path
A dedicated private security mailbox and disclosure SLA have not yet been published. Until one is verified, use the Moneta Discord to ask for a private reporting route; keep the first message high-level and do not attach secrets. If you cannot communicate safely, do not test the issue against systems you do not own.
Good-faith testing
Limit testing to your own devices, local copies and explicitly authorized testnet endpoints. Avoid data access, persistence, disruption, social engineering and automated scanning. Stop if you encounter another person’s data or credentials and report the exposure without copying it.
Response expectations
This is a volunteer development project. The operator may acknowledge, investigate, fix, publish or decline a report and cannot promise a response time, reward, confidentiality or a particular legal outcome. The risk disclosure explains why the software should not be used with valuable assets.