Security Policy
We take the security of DeFiMara and its users seriously. If you believe you have found a security vulnerability, we encourage you to report it responsibly.
Reporting a Vulnerability
Please email [email protected] with:
- A description of the vulnerability and its potential impact
- Steps to reproduce or proof-of-concept code
- Any relevant URLs, screenshots, or logs
We will acknowledge receipt within 48 hours and aim to provide a resolution timeline within 7 days.
Scope
In scope for responsible disclosure:
- defimara.com and its subdomains
- DeFiMara web application and API
- Smart contract interactions and wallet security
Out of scope:
- Denial of service attacks
- Spam or social engineering
- Reports on third-party services or protocols
Disclosure Policy
We ask that you give us a reasonable amount of time to resolve the issue before any public disclosure. We will not take legal action against researchers who report vulnerabilities in good faith and comply with this policy.
Contact
Security reports: [email protected]
Machine-readable: /.well-known/security.txt