If you have found a possible vulnerability, please email security at flare dot network.

We sincerely appreciate and encourage reports of suspected security vulnerabilities. We currently run a bug bounty program through Immunefi, where eligible researchers can earn rewards for responsibly disclosing valid security issues. Please refer to our Immunefi page for scope, rules, and submission guidelines.

Critical vulnerabilities will be disclosed via GitHub's security advisory system.

• All TypeScript source files under the src/ directory.

• Test files under test/
• Build output under dist/
• Configuration files