Thank you for helping to keep CryptoHives Open Source Initiative and its ecosystem secure.
We take the security of our software seriously.
If you discover a potential vulnerability, please report it responsibly using the instructions below.
Do not open public GitHub issues for security reports.
Instead, please report vulnerabilities through one of the following private channels:
You may submit a private advisory via
๐ GitHubโs private vulnerability reporting tool.
Please include:
- A detailed description of the vulnerability
- Steps to reproduce or proof-of-concept
- The potential impact and affected components
- Your name and contact info (if youโd like credit)
Alternatively send your report to: security@cryptohives.org
Encrypt your message using our PGP public key (see below).
Once this project is fully funded and the Nuget packages are in a released state, the following response timeline will be implemented:
| Stage | Response Time |
|---|---|
| Acknowledgement of report | within 48 hours |
| Initial assessment | within 5 business days |
| Fix development | depends on complexity |
| Public disclosure | after a verified fix is released |
Weโll keep you informed throughout the process and credit you for responsible disclosure if desired.
| Version | Supported |
|---|---|
| Latest release | โ Supported |
| Older releases | โ Not supported |
| Pre releases | โ Not supported |
Use the following PGP key to encrypt sensitive information before sending it to us:
-----BEGIN PGP PUBLIC KEY BLOCK-----
mQINBGmdWcQBEACn5xRp6OG/pm1QKyjg7x/yI6K4h5qWJ0r+eyufhRUdvR70po1a obpna6PpWRlMfhHRGA2Z19vpMZQvazTwymEOVgej8Qi2ZiPAw3soAxPFZDkaw4kt Wn3MWEhO3R3WT9/N4bQZ8klwWMDkqWaoyoppdcMvwD3LFRi8hzeXtuJzJ/6MUgN8
qW9d77Bu4cbHvPMslVT8cw8CjKZsn5RAmXu3COZRmoWkaje9fgyavRM7fEOfyxLA a1Ef6Ky641pTFl6rHZeSb4M/Z2wSiyQhGum6v3GJN8NJY4rXKICSJrdkLBpIfUAu AitQu0wxFrwa1UIcpgNjw6HXQf/yMrwl9HA/wkoQtdotf9qGJtP56jkz+T5nJg8v
furaXviSaYWigcO2uYZWoz6FfvtCwSE/UvltzXpix67IzNjfJvsZFia86U330M8P qYadLEI1iFJhQ57THxRup1UNwZP00ymvM3svIhNAw8A9ZYI1h/kJ2RcjyQ2MspXk 3XDld558eEjiFX8dfXMTv41fkHMW33+XiIulIAPZrRJyqHUKz9MPhUtS5faeGYJd
gCfLwA01t/nHkogML/o/5bDQ9V/CpoyoiVE0UmzTLu1aTnQJnTiq8PdRjv2U8doh FPrTfTNsUsFefTTadPYBzvMdCmy7IqVmfkm1hY8QD0IU09lvDxH+XXUfxQARAQAB tC9DcnlwdG9IaXZlcyBTZWN1cml0eSA8c2VjdXJpdHlAY3J5cHRvaGl2ZXMub3Jn
PokCVwQTAQgAQRYhBF3vlZ7mKSalaVITEZ+JnK3rQROHBQJpnVnEAhsDBQkB4TOA BQsJCAcCAiICBhUKCQgLAgQWAgMBAh4HAheAAAoJEJ+JnK3rQROHi4oP/igCuDqu QVaiazVcMsHV2LrfetYndKU3DXblK4A5+WSkymYx6piMBwVca0NpL7J5KfxRQO14
86T8UZpJIsV1xwXtq7d9TXN/xJ/xRDdItV1RiBewYp96oulC5yVLqxA5dWNVfdkZ 3OXtB7/oB+dvQTWirnJRZAeGL1fBhWY5Z6Z2H8zvKXxTDvprECuL33Qrf6uLUlvz eIzVITPweeulTWBGZ48OsZ2ziZADTSvAIKyafXmo7AeASguYI5DQA1PfZHqe9GQf
4RBJQA0xaEe4bYGbi2jm/GWs8ZjAONZUSirXnRDTk9sv2u4D7gjXuLliX+hzN0vd M7mgi58ei6cGaYcqaPt5DQ9DICVwl2WXVXbvXtmDm6pJ0Zpe1cN0SWAlaEk/Rmc4 cEEwKfuHCtD6MNt0gFog9Ir7JHoTgGi1dk0sXYKBBPekGVNAaR8Rya5XsaI2Wkk8
YefA09TS/MMuFIicz1oOPDMMlv8sms4fYrizz7SueCB4qY6/44CzLm6scywxIZrb 7DdoLF+nPoiA9gigXwKrdN2dRv+CB0c8SQPcCdcJA+mntN/DbOnXQGEXQvC9mojv T4+7tF8YUVVcKAYe5YKWSeJHutt/iaSG9OI2iBqE1zB5IA3h9elog5TtA6Iuvaqd
m+MezSYPD9WoWzNm1K4TccemIFylxAkFG7OUuQINBGmdWcQBEADU1tzGnz0/cVuC LY28mW08vX9JHX6u4eWMEld6d9wR1hHX6g0RO6WkrY3PLu84NUmelsXqG4fZvtsv HCGl8r1E235hzQOsBAdhEMW1rstPUHxrCuWGc6fQTMWjSZ1yKdLijyRxVeMhevGD
eGsUQSgggVtqqWzHFeWiBASIUYp+7OdU9Lny2Mvorx/lkwhZy+WV/Zy7OwJLl6jh +M4i8vaD6EmXvIzmR8O92BrMU6woANPBdQZdNHwtRcvM0qaMH3T2CNB3a7aqRmxM HyFgHXBFlpy628FD+XGEfnorOKZ74cWCYJdcR8FUG1vNgfoyewR8Mjgdupi160sE
xopjafmpNb9ls8uV/yWA3mtfYwW4EWbhhGdZqIzllWDwM0Dn3nWldquw6GylvmZj ytKclkJlo8Gv/CqkqvJsUtFmxKHZnHrd34IUOyE4netvVNU5Q9uY4z51WjmjoXW1 my8+RqdZy3OdKV+Wz4OGrN1ujHD9tzFnj1i0fMJ/4Hj+/Zr0KHvaEne+tQQsYKEZ
ypbAEZEMJEHGx2W9Jx6NUNirI+wLnR7N8IFCT9qLYkmbuET6B0Dy+oQXw1ESqAGn TMbC20MLQ1EFGJbX+9wQ2UMULVGyJg+u/CacSol4flhodsmpr4oBO3ZzFoOIQE+h s06RVWM+pykkockhfa1l+UtFfjNUvQARAQABiQI8BBgBCAAmFiEEXe+VnuYpJqVp
UhMRn4mcretBE4cFAmmdWcQCGwwFCQHhM4AACgkQn4mcretBE4cYJBAAhDYY8OG7 7HHtltnqHi3eiU8SnOBhVHWNNF4vdVukV95hMOEYmXQnPxR9C2DyZSzYR/PBmEY6 rtszpxb6bSwJbrUWFkgbA0BFGHyAWUu0+aWePcSVRrUgYGPuxNWquDNfvhqiQmcj
8cvU+qNkMLSTVd/qNqf734KRU6QSMLs2//Dyl+DkvPM2ZYY/XJ3Dz839cB5kChPt beBxxwyzMXM69lj/di5m9h9CxmQo+b/qayHCxzbfvgQ5/jxcyrVKZwXdvKrwFCqD 0IrlPPJFRMjCmg0XUVGVrFwNUpa4ss7L9n4L/hsAJ4xAzi3641jQboY1EeaI1pHD
o/ZuuOhQXECjaAAScxO8HbxOJv1dMLQB7PRyk6G+bE3PNRbEWyG99g+CSrPfstfL 52BSJm5xhdizxnuzol15pAPggeDopT7eQlCdhZVlbChK/ncBhTiOGLf6HornimzB icvTRraRHUrRZhI7qmeZcfshWALc/4rXlkBo6BjqvNSS9DJP7grSl4Lm5JCg6RPB
0dof3GqQTQf3MVaLXB6mICniXcd1vfh5qOnGp0pxHl1hs7AazO3/m31CyxnAwWJ5 GBV1jsn+QCMux/iER9qG+FGpMQWgg2x6cBjbSo3tzTbrrgg/onYuhkiU6ZFbcNwb uUPyinFgrz3B6fi6TsnCPQemvKMFS8l3DJI= =sFTN
-----END PGP PUBLIC KEY BLOCK-----
Fingerprint: 5DEF 959E E629 26A5 6952 1311 9F89 9CAD EB41 1387
(Rotate keys periodically โ verify the latest version at https://cryptohives.org/security).
We ask all researchers to:
- Avoid publicly disclosing details until a fix is released.
- Avoid actions that disrupt services or compromise user data.
- Respect the privacy of users and systems during testing.
We appreciate your contribution to the safety and trust of the CryptoHives Open Source Initiative.
Together, we can keep the hives secure. ๐
This policy follows GitHubโs Security best practices.