The Cardano Foundation | Identity Wallet project takes security seriously. We appreciate your efforts in disclosing any potential vulnerabilities responsibly.

If you have discovered a security vulnerability within this project, please report it to us as soon as possible. We encourage responsible disclosure and kindly ask you to follow the guidelines outlined below.

To ensure that the security vulnerability is properly addressed, we request that you adhere to the following guidelines:

1. Do not exploit the vulnerability: Do not attempt to exploit the vulnerability or gain unauthorized access to any user data. Only perform actions that are necessary to identify or validate the vulnerability.

2. Privately disclose the vulnerability: Please do not disclose the vulnerability publicly before we have had an opportunity to investigate and address the issue. We appreciate your discretion.

3. Contact us directly: Send an email to our team at [email protected] with the subject line: "[Cardano Foundation | Identity Wallet] Security Vulnerability Report, or contact our team at Discord."

4. Provide detailed information: In your report, please include detailed information about the vulnerability, including steps to reproduce it and any potential impact.

5. Share your contact information: We would appreciate it if you could provide your name and contact information, including your email address or other means of communication, so we can reach out to you if we require any additional information.

6. Keep communication confidential: While we investigate and address the vulnerability, we kindly request that you keep all communication related to the vulnerability confidential.

7. Allow time for a response: We strive to acknowledge vulnerability reports as soon as possible and will make every effort to respond within a reasonable timeframe. Please be patient while we investigate and address the reported issue.

We believe in recognizing the valuable contributions of the security community and are open to acknowledging those who responsibly disclose vulnerabilities. If you would like to be acknowledged for your responsible disclosure, please let us know when reporting the vulnerability. However, we respect your privacy and will not disclose any personal information without your explicit consent.

Thank you for helping us ensure the security of the Cardano Foundation | Identity Wallet project and the broader Cardano ecosystem. Your efforts are greatly appreciated.