If you find something that can be treated as a security vulnerability, please do not use the issue tracker or discuss it in the public forum/channels, as it can cause more damage rather than giving real help to the ecosystem.

Security vulnerabilities should be reported using this contact form.

If you think that your report might be eligible for the Bug Bounty Program, please mark this during the submission. Please check up-to-date Parity Bug Bounty Program rules for more information about our Bug Bounty Program.

Warning: This is an unified SECURITY.md file for the Paritytech GitHub Organization. The presence of this file does not mean that this repository is covered by the Bug Bounty program. Please always check the Bug Bounty Program scope for the information.