Do not report security vulnerabilities in public GitHub issues.

If you discover a security vulnerability or sensitive security issue in Harpocrates (including smart contracts, ZK verifier circuits, API services, or frontend applications), please report it privately:

• GitHub Security Advisories: Submit a private vulnerability report via the Security Tab.
• Private Disclosure Email: Send details to security@harpocrates.dev.

Please include the following details in your report:

• A clear description of the vulnerability and potential impact.
• Step-by-step instructions or proof-of-concept code to reproduce the behavior.
• Affected component (Frontend, Backend, Soroban Contracts, Noir/ZK circuits).
• Any suggested mitigations or patches, if available.

We appreciate responsible disclosure and will work to address security reports promptly.