Report a Security Issue

At Web3 Foundation (W3F) we encourage responsible security investigation and reporting.

How to report

To report a security issue send an email to [email protected].
Consider encrypting your message using the PGP key embedded below.

PGP Public Key

			
			-----BEGIN PGP PUBLIC KEY BLOCK-----

			mQINBF5iUs4BEAC9nv43zi86oG9q7KlYC+JQXDDRQUjHZFOWU6np05XtkoZDOnfb
			kuxqSziUswtDGKtn/N6DerY/u6+ShVdEkk/yuzEGAJH14pKBRYXirQD4iQ5Y0V0d
			2ndJQvYUy8R/7eWI01tG42+k1IuDbAYx4VFbnTP2vMRx+8L6agLus0s2CbKwGr0E
			w8kWed9x2wKVufsnfk0cgYarU3J/539GnmAJTmDE/E4WMI7qdX+kbfAhcFVAZOAr
			fXWnHZPF0zmWmiM8xwarOToOS83vfKQT+WBaAt6K30i4bfssikdMyJvDVi0mHBV5
			/4MMwfkc9XVcnCS5ph0lRtOYvejl1pBSt6KmcpWTHCXssvjpHTw5R6C3B+bBJjdr
			KBMm06CweuXNHtntHLY9OfYYD3I/vshMIoKQ3oLDqAiqpP6BBzma8kduXCuRiu/u
			l+26hZlyjJP7zTYYoFc2U0MtAGVrECoaH+qeT7IQSAV986bkxsCxgom913e0wlNW
			JpdKDN+ooSeOI9s7Cf3+fUIePi1/vu0/w6Cx2Fh71BQGD7c30oDBJLUg7gEcMlq4
			5ohTcgIT1c1lUGWryR9zlD+sby+l78DtN3wPpBLu+tS4+hD6w3+nZXZVv8wxDe9Z
			WLWKvRq41ZWCjzOyeUWc2Z633vQ1RutP0ST2nwMLuCnYFfq0ppIxZuj6nwARAQAB
			tDNXZWIzIEZvdW5kYXRpb24gU2VjdXJpdHkgPHNlY3VyaXR5QHdlYjMuZm91bmRh
			dGlvbj6JAlQEEwEKAD4WIQTPx0FKepqKUrxSQzRxhnBy1IoXagUCXmJSzgIbAwUJ
			BaOagAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBxhnBy1IoXaq1nEACDIuxG
			WMuff/3B37S9iQ4RIkp1cnp3e7PvPn9BB7w5AxwKa9oYRx7f9b3e7fHUwOGgXoNW
			+e7VF6T8AuqZAVEaHpXLInYVU/U3px2+VYtsLfVpOJoYbLzOOjhNt+hreya7BLKq
			ehigEkt+pnULW/GsuWVxQPrZSBkdRoOFNmKDcvDgtNbr0ai4slQHcd95v7iU19jl
			Lp9RuQvmf3YyyIE9hc1otcSQcFrw3ntMl+LH97vjlEIWje6IiOJcefwByQsFT2Nl
			ULZ6XhCO2fWrvMfemgatT0gL5WSpkfstHhrZa/RNzB83suhh2ziUg7VjTTnU+hRC
			RGBeLuxAfwxvtOl7relXMCyOgPH4yc2GXY2ph17ursu0/pjmvKCUXWgoetJ0LGnf
			j4CPIFhjr0Fow5myObewjRMNjw/2r7InWpaVsRdm/Hhf8mWVXFBdPtSwc7FXm7sh
			N/EU1bZmPCMjr5M7gkJgX/0Ck0sSKOtLqkJcmxmhN6Oar1o/kLRE6AMtEQf8T6x3
			zzDaN1AenFkJgZf6IYc14MNwZEwKgq12kY6QaxPLAclTRk/+sr4gc+6ZfdmoHwx+
			zcR2N3ZfCmZt44GOu43lfrDaf6JRa9uGEbds76iz7TMneGZgDnxHnzvoOrlkoK+T
			LIBNjW864SGHwCvtrnVhzbWysaLJskVsDi0fpbkCDQReYlLOARAAogWMkxmTtMsZ
			2Q1OEGhf8Dq12qHRQ2hXYu5pKqarDRIx0lq+T7uvETTU7ebJMDwALtLWpE9BtwwL
			TZreXf0HGAR3YZ5G5EHF2H5WaD29eRudpdI2Vj+nyf/dcd5HOcYmsBGLcGNiyjwm
			2G1Er5QQQocBbWMsdU0GfMtmxY9bfKe8DKRkX8Pya8JZHaUBZFE8ZNbWypsQ3as0
			6HZ9wAET6g/c8Da5J0q5waEuVbw63Xjn56F9BzUlgvT3+E6KtJ2zMfU3eOcfJyBK
			R7OMP9E8Ss41m4R7hNV2angqDyd9mpDKiVNjFWXX4wWAFX0QLxaqXL+UXFUL99Hu
			33gbjeyY5pqj5/Q7NQp66GYqFiPBU8OR6qZXO5YjuSJSnk/VXigZ0H3z1U26qEat
			TLTHTOPfIXCa3YuEa7KsN4PT10d+BzkOCGLO69+pgGjlEmWA73l3JM/v8Rx4yAfn
			ZF2dzs0A5QD0vNv52Om3Rl/ZA3sKVC6GW6rwWaUV/F1DSQHEukrQApVJkihFLiZb
			0YRL+3drF9bgLSJxAUp+hOG9z/DQu3nNjPAXQKaoExFX3tT6mbQk+0OKuH6zIPWI
			R2lSrsq9OLQxTuAWdSKLU1zzwYATRcgXx9Ua3yTWtGQhbgnWKB7BZNTh3wEMdlJc
			nlfZ28Wf9Fdwat4e6X7c/mkiApCyGIMAEQEAAYkCPAQYAQoAJhYhBM/HQUp6mopS
			vFJDNHGGcHLUihdqBQJeYlLOAhsMBQkFo5qAAAoJEHGGcHLUihdq3ckP/28kZl2L
			J05k1hfxn/LJ46hEWnrIOjbTnrLI5CFG2+ODUipYWCGMBIcS2iND2iRc3RQOA4uV
			ArSq4kxO4Jd9xz+I/YEhqrKULrWxUUhKyKWrbnoTHvMYJ0tJONOQBbciAGlR6NDx
			0xWbECpnA15LIQEUeljSs1v2OogearotrX7hFFdVpfA5XKGc4NB+X5UgrSq/OYBf
			vty5teR6Oy8Dqku9xjq/O12Vv/Ux9Q5K/9SgjePf3XsPVRL7z8or1+EA92XdxRAW
			c7oQh/9/aWlt9pznc+vyFdulypdvu0NVm1B/NzvSno2z/rDebVPyOTRFHlg+DjeG
			pBI/IBiLIwQZaR2AOgKDkRiboPiiFFpSgq/l0LQjKto1vJeFlK5J/sIzQ/qjnx/r
			gXJGLhrMHRgs7ZqjrSaVy0I8p2mkDVsgjEA19D/G9Z6qwd7TaWinkdXk9FC+hsJ5
			+2J+rCkCvrlUC3uOqzsjiCsv0EUYGb+5zIr3jALo43PyYcqEQsOOI/s2BL0T0G54
			IWZnPv8bzWqL684XG2Z0hLMzoDbciC8j9Eg+6mZ6h0wpgWOJ+Q+VyCjn4DwLJA4m
			+ObDB93FwsWoMwe3ky6p+DlfYVtvMIYIYvit7dqHc+WH61sAUkx9MFkz7ooQc5eg
			CGVYvH03uHLXqYFQOj3w04NzxbxMX5Zh9EqL
			=K6r9
			-----END PGP PUBLIC KEY BLOCK-----
			
		

To facilitate reproduction of reported issues, we encourage you to include the following information if possible:

  • Description of the issue
  • Description of the issue’s potential security impact
  • The affected resource. e.g. URL, GitHub code snippet, transaction
  • Ideally a proof-of-concept that demonstrates the issue

Our process

Upon receiving your report, W3F will assess the issue and reach out to ask for additional information and/or provide assessment. Any reported security issues may be eligible for rewards depending on W3F’s determination of their novelty and the severity of their potential impact.