SECURITY.md

Coordinated Vulnerability Disclosure Policy

IMPORTANT: DO NOT open public issues on this repository for security vulnerabilities.

---

Canonical Policies

Our canonical policies are maintained here:

• Security Policy (reporting process, scope, disclosure standards):
  https://github.com/cosmos/security/blob/main/SECURITY.md

• Release & Maintenance Policy (supported versions, lifecycle, EOL):
  https://github.com/cosmos/security/blob/main/POLICY.md

• HackerOne Bug Bounty Program:
  https://hackerone.com/cosmos

All vulnerability scope, supported versions, lifecycle timelines, and reporting procedures are governed by the Security Policy and Release & Maintenance Policy linked above.

---

Reporting a Vulnerability

Security vulnerabilities must be reported via:

• HackerOne: https://hackerone.com/cosmos

Please refer to the Security Policy for full reporting and disclosure details.