Security at Algorand

Algorand takes the security of the platform and of its users very seriously. We recognize the important role of external security researchers and developers in helping keep our community safe. As with most security reward programs, we ask that you use common sense when looking for security bugs. Vulnerabilities must be disclosed to us privately with reasonable time to respond, and avoid compromise of other users and accounts, or loss of funds that are not your own. We do not reward denial of service, spam, or social engineering vulnerabilities. If you believe that you have found a security vulnerability you may disclose it here (Please do not create an issue or file a pull request on GitHub):

Algorand also runs a public bug bounty program on targets that may be found at the following location: https://bugcrowd.com/algorand

If for some reason you do not want to use the above methods you may reach the security team at [email protected] (optionally using our PGP key below) under the same responsible disclosure terms outlined in the program brief.

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQGNBFz/s/YBDACr9qJho3qkW0n/W+uyIMTp1nsHC8NJPGJFj/eBbawpBT0BayvN2Eu+VUXf2sS6IFjMc6Spz/bdmt7mwVoUcidNHWxG+YBUoEYDW8kcn7Z6v3FREX+O6mHxYzeaCrKIFVnBij0W3m9e7w9TuuWC/iLvMZlve2GH0x+pG8VCs78PYPvgJtFNjSjUgyq9gJBIEg8PDXtTd0oPIlmsrqPPxtUtR10Zh9FovodDFz0p1TIZCS/0oy6FUa207HjsD9Brl4LxIFLtp2k262z4bUbQKsNeRbsuro8oyUUXW774SotjF3YHuIKWa17hFScMLqbI4v9zw6q3rc7fzxjXeVqt9CqG1pAPYDlgBdwxpTlW5yew92Nd5kaaZ00x8R2WW5Kbo//btMtKKYBgQE4GfFdg46sFDOtXcaPzAR5muV10suNw5lEai9eye7wRyBrFANhs4XWfKUiXUEuQvOF2XX86O7KCfAFypp+mD+78meqYvm11IRoQvsKpRP4k7dnuNyFOZQsAEQEAAbQpQWxnb3JhbmQgU2VjdXJpdHkgPHNlY3VyaXR5QGFsZ29yYW5kLmNvbT6JAdQEEwEKAD4WIQQdGYx7dq1nfur8gkdIevN0lA9OigUCXP+z9gIbAwUJA8JnAAULCQgHAgYVCgkICwIEFgIDAQIeAQIXgAAKCRBIevN0lA9OikbgC/473YCtXpqeL4+iY2tXZsfxrYYbynAeTa3LjHd3B/VVNdEq8tlb83HZHhk5aNQky88g7nog2NB4yjkZMH6IzNc8qfLZm8J4Id+4YHprHVzaQb4J6unWQl2XvB3x7QHTj5+HwY/HeNiOBvva6Mj/mmGehrCOSWLjOD8JpeuJn9oZl9MHEUcrnlq1B6x/2lYd2HyW4jjMQnmYcfRVrJl8eKIgvwgQG/WTw26UPpzy1sxHS8P0gnrxntbbZh+v+ozZlbBLCtzjJcAvOBnbMMPHn5gw3NdWPt3LQMywYbU3tGOKcQuKg/eR1z2PFu8Ad0N9n7/vOX9b78q87trW+wgPdgkI0WZT9C6u7vRyAmt6GMX/9Aq7mBxdk/pQ02wcInMHNJX3SzHpzCBNLuN1QYo2x/4uqrjLzrd8MDyrFOkKpuzdqWhFTOhNEa1QcIZbVjUSb+FDUYQe26rs5bJw4+lCDCA8S9bNpNr2ezvBdKeE9IANjan+O/g2KsLFI4cwwiCIu1W5AY0EXP+0rgEMAK4NII7Nks5rJ2FsMcGgMdeEpuo8HhmmXoyH6jk7cEjnh4O6ZYb7Wuqsqii3ctcNRFrbdx0hDIBqIn5IMboch7almR0c/5fDxgxzmnUmGq2vSqF15XIcucVlNivLxHDTTkoNRekoTXStOJJZIRWuk0gyApStv+nlWp6kGeND1kO6yVQ/KzqgBzuDgwGGkvh+IRDkzTikUQnrDbOaHBpjEEIEDRzJ5+zxJPfmqKEkr+S461KQyC/N8Fl9HkS3s1FfLv+WayNKshJC+eMHypvj7rr09iNZbUId7hcdCQeapRt21FcXormd7uTcI2X2CCcY6rjSOCWdO78J8iirPbS8QmkZdkFHa1LYpN0aZWTLknE12G4EqQyq73yoThNIOtoauKb+2GrDdEfb2R55HUCYmAkNocxJ8rsGmJOm7f0LBKw7UUvuto3m9EdkK8hil7dAnHbKmVGpExxDpMmwwM+C/nYSz2SDZmOyJBnqcItYidXyYCOiGtlQ5TNXKx2LR6j8UwARAQABiQG8BBgBCgAmFiEEHRmMe3atZ37q/IJHSHrzdJQPTooFAlz/tK4CGwwFCQPCZwAACgkQSHrzdJQPToqovwwAmTpCBbQ6FnKn17OjiMg7uPtl3ivBhjT6zoTcVwvxALXZ2XB+/ifBY4wVMHh9zak1gHZuhjqDv/j5CrXU02R1a7NFq7hPDa5n9seM9kTjipH9hM4q3FXDF4qCS3MSQ+Ayuml/xWRX0KpO3ank57OXWsuWAP+BRbvzZGs5lVtqIHse32xy+7wUydn9qe400a0naNpIo/7iQ1E4un9N3DSqTtiuEPQej8MJYfBOIkkqafRDnETmiYyBj+GoePJYuSv7X5P2TaUPQK1Jd1sIjXriWT4pGYez9gFGYb3k5xQhE+4+6KqFuhDmYTyTvvVLayjEo8vOfsmCo6Xq9JorRexPuKOFEeN+Na+yFoGbEnz00enqfvcGgTj4tLyvz17nb9cuFvzc68kn+7cTCGp/UXvv+pRo7XVZ/B2sDh2sRpLu/3LBw0rG5QMxqAvDAU55xBPKtMxg6tdtpgTMSzMa0ZtkDul/l1ATiE7qyuxXWHQ4Sq4Y6hHu/VknJQZIwfnpb9aG=4t9N

-----END PGP PUBLIC KEY BLOCK-----