Security Policy
How we handle disclosure, reporting, SIWE safety, and support coordination.
This page is a practical security baseline for FTSOBest operations and will be expanded with deeper implementation details.
Last updated: 2026-05-06
Table of contents
1. Responsible Disclosure
Please report security issues privately and allow reasonable remediation time before public disclosure.
2. Vulnerability Reporting
Include reproducible details, expected impact, and affected environment so our team can triage efficiently.
3. Scope
Scope includes the FTSOBest platform surfaces we operate directly. Third-party wallets and external providers are outside direct control.
4. Wallet and SIWE Safety
Always verify the domain before signing, review SIWE prompts carefully, and avoid signing unknown requests.
5. Response Process
We prioritize triage, share status updates, and coordinate fixes based on issue severity and user impact.
6. FAQ and Support References
For common operational questions, review our FAQ and support pages while detailed security documentation is expanded.
7. Contact and Coordination
Use our contact channels for security-related reports and include concise technical context for faster coordination.