SECURITY.md

Security Policy

We take the security of our software products and services seriously. This document outlines our security policy and the process for reporting vulnerabilities.

Reporting a Vulnerability

If you discover a security vulnerability, we ask that you report it to us as quickly as possible. Please do not disclose it publicly or create an issue/pull request on GitHub.

To report a vulnerability, please send a detailed email to:

security@algorand.foundation

Past security incidents

• 001 - ARC4 Encoding Vulnerabilities
• 002 - Missing Assert Optimization Vulnerability