Please do not open a public GitHub issue for security problems.

Email yeheskielyunustame13@gmail.com with:

• A clear description of the vulnerability
• A reproduction recipe (transactions, payloads, code snippets)
• The surface affected and an estimate of severity / impact
• Your name and any contact info you want credited

We'll acknowledge within 48 hours, agree on a fix timeline, and coordinate a disclosure window. Mainnet contracts are immutable; if a vulnerability requires a contract migration, we'll publish a migration plan alongside the fix.

In scope: all source under this repo and the mirror repos claudelance-sdk / claudelance-types; the deployed contracts listed above; the npm packages listed above.

Out of scope: third-party RPC endpoints, MiniPay itself, MetaMask / Privy connectors, Celoscan, ERC-8004 registries (0x8004…).

(empty — be the first)