Privately report vulnerabilities to the repository maintainers before public disclosure. Include affected version, reproduction, impact, and suggested mitigation without wallets, secrets, or mainnet exploitation. Do not test against third-party funds or public markets.

This code has not received an independent security audit. The coordinator provides operational coordination, not anonymity; the program owns metadata/rent accounts only. Rotate any participant secret suspected of exposure and cancel the affected round.