Report vulnerabilities that can expose tracked wallet data, leak credentials, or distort propagation alerts through a private channel before public disclosure.

Include:

• the affected module
• the expected versus actual alert behavior
• whether the issue can mislabel copied flow as leadership