Security

SECURITY.md

Security Policy

Stellar AgentKit takes security seriously, especially due to its interaction with financial and blockchain operations.

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly.

Do NOT

Open a public GitHub issue
Disclose the vulnerability publicly before a fix

How to Report

Use GitHub Security Advisories (preferred)
Or contact the maintainers privately

We aim to acknowledge reports within 72 hours.

Scope

This policy applies to:

SDK logic
Contract interaction utilities
Transaction and signing helpers
DeFi-related operations

Responsible Disclosure

We appreciate responsible disclosure and will credit reporters where appropriate.

There aren't any published security advisories