Security Policy

We value the work done by security researchers. We are committed to working with this community to verify, reproduce, and respond to legitimate reported vulnerabilities. We encourage the community to participate in our responsible reporting process.

If you are a security researcher and would like to report a security vulnerability, please send an email to: [email protected]. Please provide your name, contact information, and company name (if applicable) with each report.

[https://ea-foundation.org/security_pgp.asc](Download our PGP key)

Responsible Disclosure Guidelines

To encourage responsible reporting, we commit that we will not take legal action against you or ask law enforcement to investigate you if you comply with the following Responsible Disclosure Guidelines:

• Provide details of the vulnerability, including information needed to reproduce and validate the vulnerability and a Proof of Concept (POC)

• Make a good faith effort to avoid privacy violations, destruction of data and interruption or degradation of our services

• Do not modify or access data that does not belong to you

• Give us a reasonable time to correct the issue before making any information public