Report a vulnerability

How to tell us privately about a security problem in the Bloxchain Protocol or the Bloxchain Platform.

Do not open public GitHub issues or public posts for security vulnerabilities. Email us first.

Contact

• Email: [e-mail]
• Subject: [SECURITY] Bloxchain vulnerability report
• Website: particlecs.com/contact, mentioning Bloxchain

What to include

1. A description of the vulnerability and which surface it affects (Protocol contracts, SDK, bloxchain.app).
2. Steps to reproduce, with network, addresses and transaction hashes where relevant (Sepolia is fine).
3. The impact you believe it has.
4. A suggested fix, if you have one.
5. How we can reach you for follow-up.

Supported versions

Version	Supported
Current tagged release on GitHub releases	Yes
Older tags	Best effort
bloxchain.app	The live Platform (Alpha · Testnet · Local-first)

Full policy at the pinned commit: SECURITY.md.

Bug bounty

In scope: smart contracts and Protocol behaviour in published releases, and Platform issues that lead to unauthorised on-chain outcomes or key exposure.

Out of scope: Platform issues with no security impact, social engineering, third-party wallets and RPC providers, and issues in your own custom extensions.

We support good-faith research consistent with our disclosure policy. Eligible reports may receive acknowledgement and bounty consideration under terms communicated privately.

Related

• Security
• Audit status
• Security model