What to send

Use the subject Security report. Describe the affected page or app area, what you observed and why it may be a security issue. Include a safe way to contact you.

Keep the first message brief. Do not include wallet secrets, credentials or another person’s data. If the technical details are sensitive, ask how to share them before sending more.

A useful report explains the problem clearly without requiring access to a real person’s funds or private information.

Test only with permission

This reporting page does not authorize access to other accounts or permission to move funds, disrupt services or test providers. Agree the scope before testing beyond ordinary use of your own authorized setup.

If you encounter private data, stop. Report what you found without copying or distributing the contents. Avoid actions that could turn a suspected issue into a real loss.

What to expect

Orrerie does not currently publish a bug-bounty program, reward schedule or guaranteed response time. Any testing permission or special arrangements need to be agreed explicitly.

If your own wallet may be compromised, use available security controls from an uncompromised device and keep useful non-secret records. An email report cannot guarantee immediate intervention in a transaction.

Interested in Orrerie?

Request access