SECURITY.md

RISC Zero Security Information

This document provides links and contact information for RISC Zero.

Review Audit Reports

All security audit reports are available here.

Security Advisory Monitoring

Security advisories will be published using the GitHub Security Advisory feature on the RISC Zero repository here.

Vulnerability Reporting

Vulnerability reports should be submitted against the RISC Zero Bug Bounty Program on the Hackenproof platform here.

Only report vulnerabilities that are present in the latest release.

Email Contact

To contact the RISC Zero security team by email please use the following email address:

[email protected]

If the issue is sensitive, please encrypt your email using the provided GPG key:

----BEGIN PGP PUBLIC KEY BLOCK-----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=Y8CJ
-----END PGP PUBLIC KEY BLOCK-----

Change Log

version	date	comment
20240530	2024-05-30	Initial version