If you find a security vulnerability, report it privately through one of the following channels:
Do not report vulnerabilities through public GitHub issues, discussions, or pull requests.
Please include the affected version or commit, a description of the impact, and steps to reproduce the issue. Do not test against instances you do not own or operate.
This policy applies to the code in this repository and to the mempool.space website.
We will acknowledge your report within 5 working days. We ask that you give us a reasonable opportunity to release a fix before disclosing the issue publicly.