Skip to content

Security: Vinaysati/Cross-Chain-Exploit-Detection-System

Security

SECURITY.md

Security Policy

Reporting a vulnerability

Please do not publish an unpatched vulnerability in CCEDS as a public issue. Send a private report to the repository owner through GitHub's private vulnerability reporting feature when available.

Include:

  • affected version/commit
  • minimal reproduction
  • security impact
  • suggested mitigation if known

Defensive-use boundary

CCEDS is intended for authorized defensive analysis. The repository contains deliberately vulnerable contracts only as local fixtures for scanner validation. Do not deploy them with real assets.

Secrets

Never commit RPC API keys, wallet private keys, seed phrases, or exchange credentials. Use .env or your secret manager. .env is gitignored by default.

There aren't any published security advisories