Security Policy

Report suspected vulnerabilities privately so they can be investigated before details are shared publicly.

Reporting

Send security reports to [email protected]. Include the affected program, account, transaction, or URL; clear reproduction steps; impact; and any suggested fix.

Do not include exploitable details in public issues, social posts, or community channels before the report has been triaged.

Rules

Only test accounts, assets, and wallets that you own or have permission to use.
Do not exploit issues against live users or move funds that are not yours.
Do not perform denial-of-service, spam, phishing, or social-engineering attacks.
Give reasonable time for investigation and remediation before public disclosure.

Bounty

Sol Incinerator does not currently offer a public bug bounty. Rewards, if any, are discretionary and depend on severity, quality of report, and whether the reporter followed this policy.