Security
How we protect users and how to report a problem.
Design principles
No custody, least privilege for every key, fee caps and minimum-output checks enforced in contracts, and every transaction described in plain language before signing.
Reporting a vulnerability
Please report security issues privately through the contact listed on the website. We acknowledge reports within two business days and never take legal action against good-faith research.
WARNINGDo not post vulnerabilities publicly before they are fixed.