Scope

Matching engine, settlement contracts, custody flows, and the public web surface.

Severity

Reports are ranked Critical to Low by exploitability and the funds or integrity at risk.

Disclosure

Report privately first and give us time to fix before any public write-up.