Report a vulnerability
Please report a suspected vulnerability in Smartable Wallet or its open-source core privately, by email to hello@getsmartable.app. Do not publish it — in an issue, a discussion or anywhere else — before we have had a reasonable opportunity to investigate.
What to include
Section titled “What to include”- the affected component, file or version;
- a clear description of the issue;
- steps to reproduce;
- a proof of concept, if you have one;
- the possible security impact;
- a suggested mitigation, if you know one.
What to expect
Section titled “What to expect”We will try to:
- acknowledge the report within 7 days;
- give an initial assessment within 14 days;
- communicate a mitigation or release plan after investigation.
These are response targets, not guaranteed service levels.
Disclosure
Section titled “Disclosure”We may coordinate a public disclosure after a fix is available and people have had a reasonable opportunity to update. We credit researchers who want to be credited, unless they prefer to remain anonymous.