chore: Add SECURITY.md

Author: adg-flare

SECURITY.md

@@ -0,0 +1,27 @@
+# Security policy
+
+## Reporting a vulnerability
+
+Please do not report a vulnerability using an issue or any other public channel.
+
+If you have found a possible vulnerability, please send an email to
+`security at flare dot network`
+or through our Bug Bounty programs.
+
+## Bug bounties
+
+We sincerely appreciate and encourage reports of suspected security vulnerabilities.
+Please refer to our [Immunefi Bug Bounty Program](https://immunefi.com/bug-bounty/flarenetwork/information/) for scope, rules, and submission guidelines.
+
+## Vulnerability disclosures
+
+Critical vulnerabilities will be disclosed via GitHub's
+[security advisory](https://github.com/flare-foundation/fassets/security) <!-- change the link to the repo to the relevant repo on GitHub -->
+system.
+
+## Audits
+
+Audit reports are published on Flare's [Developer Hub](https://dev.flare.network/support/audits/).
+
+<!-- This section should contain the audit scope as well as any published
+audits. Audit scope can be inverted (eg.: everything except: ...) -->