Security at Algorand

Algorand takes the security of the platform and of its users very seriously. We recognize the important role of external security researchers and developers in helping keep our community safe. As with most security reward programs, we ask that you use common sense when looking for security bugs. Vulnerabilities must be disclosed to us privately with reasonable time to respond, and avoid compromise of other users and accounts, or loss of funds that are not your own. We do not reward denial of service, spam, or social engineering vulnerabilities. If you believe that you have found a security vulnerability you may disclose it here (Please do not create an issue or file a pull request on GitHub)

If you find a vulnerability, please reach out to the security team at [email protected] (optionally using our PGP key below).

-----BEGIN PGP PUBLIC KEY BLOCK-----

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4t9N

-----END PGP PUBLIC KEY BLOCK-----