Konstellation is pre-launch software. We take reports seriously at every stage.

Please report vulnerabilities privately, through GitHub's private vulnerability reporting on the affected repository:

• The chain (konstellationd): https://github.com/Konstellation-Network/konstellation/security/advisories/new
• Any other repository: open its Security tab and choose Report a vulnerability.

Do not open a public issue, pull request or discussion about a vulnerability.

Please include:

• the affected repository, version or commit, and network (devnet, testnet or mainnet), if any
• the impact, and the steps or a proof of concept to reproduce it

We will acknowledge your report, keep you informed while we fix it, and credit you in the advisory if you would like to be credited.

The node software, genesis and network configuration, preinstalled contracts, and the other repositories in this organisation. Please do not test against networks you do not operate, and do not access or change other people's funds or data.

Details of a bug bounty will be published here before mainnet launches.