Docs · Legal & security

Security policy

We take the safety of our users seriously. If you find a vulnerability, please tell us privately first.

How to report

Email security@findmyfunds.xyz with a description, steps to reproduce and the impact. Please don't publish details until we have had a reasonable time to fix it.

In scope

• findmyfunds.xyz and the pages served from it.
• Anything that could mislead a user into an unsafe transaction.

Out of scope

• Third-party protocols, wallets and block explorers — report to them directly.
• Social engineering, spam, denial of service.

Our promise

We will acknowledge your report, keep you updated, and credit you if you wish. We won't take action against good-faith research.