Security Policy

The following components are in scope for security disclosures:

• ✓Token Presale Smart Contract (Anchor/Rust)
• ✓Frontend Application (Next.js, React)
• ✓Presale SDK and Integration Code
• ✓Wallet Integration and Transaction Flow

If you discover a security vulnerability, please report it responsibly:

1. 1.Email contact@gone.wtf with subject: "Security Vulnerability Report"
2. 2.Include description, steps to reproduce, and potential impact
3. 3.Do NOT publicly disclose until we've addressed the issue
4. 4.Allow us reasonable time to fix the vulnerability

We appreciate responsible disclosure and offer rewards:

• ✗Social engineering attacks
• ✗DDoS attacks
• ✗Issues in third-party dependencies
• ✗Previously disclosed or known issues

We support safe harbor for security researchers who:

• ✓Make a good faith effort to avoid privacy violations
• ✓Don't exploit vulnerabilities beyond verification
• ✓Don't access or modify user data without permission
• ✓Report vulnerabilities promptly
• ✓Don't publicly disclose until we've addressed the issue