EarnProof backend code handles wallet authentication, payment indexing, credential signing, and public verification. Please report vulnerabilities privately before opening a public issue.

Email the maintainers at security@veridatum.dev with:

• affected repository and commit;
• vulnerability description;
• reproduction steps;
• expected impact;
• suggested remediation, if known.

Do not include private keys, seed phrases, real salary data, or private payment records in reports.

The current project targets Stellar testnet only. Mainnet deployments, production financial decisions, and regulated identity verification are out of scope until explicitly documented.