Contact: mailto:hunter@bj.xyz
Expires: 2027-10-06T00:00:00.000Z
Preferred-Languages: en
Canonical: https://imperial.space/.well-known/security.txt
Policy: https://imperial.space/security

# Imperial vulnerability disclosure and bug bounty
#
# Report vulnerabilities privately to hunter@bj.xyz. We acknowledge every
# report within 48 hours and give an initial severity assessment within 5
# business days. Scope, rewards (paid in USDC) and rules are at
# https://imperial.space/security
#
# In scope: the Imperial on-chain programs
#   Passthrough       pASsDHVUtgG5uomQ29SVMv1sQxon4Gi6g5bJV7KKqZ8
#   Imperial propAMM  ARmavNtb6xs7SpH3geahw434fwTrVw5BSvJf36CAbWKB
#   Pawn              LendieSENLn3KLWTKrxHL2hD6w2YgyP2f9MaiVHEZg6
# and the imperial.space web app and API.
#
# Do not exploit beyond a minimal proof of concept, do not touch funds that are
# not yours, and do not disclose publicly until a fix is deployed. Good-faith
# research under these terms will not be pursued legally.