Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.x	✅ Yes

Reporting a Vulnerability

Do not report security vulnerabilities via GitHub Issues.

Email: orinlab@proton.me

Include:

Description of the vulnerability
Steps to reproduce
Potential impact

We will respond within 48 hours and provide a fix within 7 days for critical issues.

Security Best Practices

Never commit .env files
Never share your TELEGRAM_BOT_TOKEN or SOLANA_PRIVATE_KEY
Rotate API keys immediately if accidentally exposed
Use environment variables for all secrets

There aren't any published security advisories