Please do not report security issues in public GitHub issues, pull requests or community channels.

Report them privately through GitHub: Report a vulnerability (the Security tab of this repository → Report a vulnerability).

Please include:

• the affected version or commit;
• what an attacker could do, and under which conditions;
• how you found it, and anything that helps us confirm it.

The report is visible only to the maintainers. We will acknowledge it, keep you informed while a fix is prepared, and coordinate the disclosure with you. A fix for a consensus or network issue may need a coordinated release before any detail is made public.

This policy covers DeFCoN Core in this repository. Issues inherited unchanged from upstream Dash Core or Bitcoin Core should also be reported to those projects.