Blockchain Security Contacts

This directory is a community-curated resource for contacting security teams. It identifies the best way to contact an organization's security team so that hackers can report vulnerabilities directly to the organizations that can resolve them.

This document is a work in progress. We're happy to accept feedback, questions, or ideas for improvements. File an issue or join us on Slack to talk further.

Recommendations

• Refer to disclose.io for vulnerability disclosure program best practices
• Don't make researchers agree to terms to report security issues to you
• Create a security@ email address that delivers directly to your engineering team

Blockchains

| Name | Contact | More info | | --- | --- | ---- | | Aptos | security@aptoslabs.com | | | | Arweave | team@arweave.org | | | | Auroracoin | m.hannes@auroracoin.is | | | | Bitcoin | security@bitcoincore.org | Security page | | Bitcoin Cash | | | | Bitcoin Gold | admin@bitcoingold.org | Disclosure policy | | Bitshares | contactbitshares@bitshares.org | | | Bytecoin | contact@bytecoin.org | | | Cloakcoin | anorak@cloakcoin.com | | | Dash | | Bug bounty | | Decred | contact@decred.org | | | DogeCoin | | | | Edgeware | security@commonwealth.im | | | EOS | | Bug bounty | | Ethereum | bounty@ethereum.org | Bug bounty | | Ethereum Classic | security@etcdevteam.com | | | Horizen | security@horizen.global | Bug bounty| | Hush | hushteam@protonmail.com | Security Page | | ICON | hello@icon.foundation | | | IOV | security@iov.one | | | Komodo | security@komodoplatform.com | | | Litecoin | contact@litecoin.org | | | Nem | contact@nem.io | | | Neo | contact@neo.org | | | Monero | Multiple | Bug bounty | | Ontology | contact@ont.io | | | POA Core | security@poanetwork.com |Security page | | Ripple | bugs@ripple.com | Bug bounty | | RSK | security@rsk.co | Bug bounty | | Sia | hello@sia.tech | | | Steem | | | | Tezos | security@tezos.com | Bug bounty | | Qtum | | | | Quorum | quorum_info@jpmorgan.com | | | VeChain | | | | xDai Chain| security@poanetwork.com |Security page | | ZCash | security@z.cash | Security page

Decentralized Applications

| Name | Deployed Addresses | Contact | More info | | --- | --- | --- | --- | | 0x | External Reference | team@0xproject.com | Bug bounty | | 1Hive | | Keybase Chat | Bug bounty | | AAVE | | security@aave.com | | | Ampleforth | External Reference | dev-support@ampleforth.org | | | Aragon | External Reference | security@aragon.org | Bug bounty | | Bamboo Relay | | dex@bamboorelay.com | | | Bancor Network | | security@bancor.network | | | BarterDEX Network | | security@komodoplatform.com | | | Bloom | External Reference | team@bloom.co | | | bZx | | security@bzx.network | | | C-Layer | External Reference | security@c-layer.org | | | Commonwealth.im | | security@commonwealth.im | | | Compound Finance | | security@compound.finance | | | Connext | | support@connext.network | | | Cozy Finance | | security@cozy.finance | | | Decentraland | | | Bug bounty | | Decentralized Vulnerability Platform | | service@dvpnet.io | | | Democracy Earth | | hello@democracy.earth | | | Dharma | | security@dharma.io | | | Erasure / Numerai | External Reference | security@numer.ai | | | Ethfinex | | bounty@ethfinex.com | | | Giveth | External Reference | | Idle Finance | External Reference | security@idle.finance | | | InstaDApp | External Reference | info@instadapp.io | | | Kleros | External Reference | contact@kleros.io | Bug bounty | | Kyber Network | | hello@kyber.network | | | LivePeer | External Reference | security@livepeer.org | | | Melon | | security@melonport.com | | | Nahmii | | security@hubii.com | | | Nexus Mutual | | security@nexusmutual.io | | | Raiden Network| | bounty@raiden.network| | | Reimagined Finance | | security@reimagined.fi | Disclosure Policy | | RenEx | | security@republicprotocol.com | | | Sablier | External Reference | hello@sablier.finance | | | Sandclock | | security@sandclock.org | | | Set Protocol | | security@setprotocol.com | Bug bounty | | Solidified | | info@solidified.io | | | Sovryn | External Reference | | Bug bounty | | Status.im | | security@status.im | Bug bounty |

Decentralized Exchanges (DEXs)

| Name | Deployed Addresses | Contact | More info | | --- | --- | --- | --- | | AirSwap | Etherscan | bounty@airswap.io | | | DDEX | Etherscan | security@ddex.io | | | Enclaves | | contact@enclaves.io | | | Leverj | Custodian | info@leverj.io | leverj.io | | Orderbook | Etherscan | security@orderbook.io | Instruction | | Synthetix | | security@synthetix.io | | | UniSwap | | contact@uniswap.io | |

ERC20 Tokens

| Name | Ticker | Mainnet Address | Contact | More info | | --- | --- | --- | --- | --- | | Aelf | ELF | Etherscan | contact@aelf.io | | | Aeternity | AE | Etherscan | info@aeternity.com | | | Aion | AION | Etherscan | hello@aion.network | | | AirSwap | AST | Etherscan | bounty@airswap.io | Bug bounty | | Ampleforth | AMPL | Etherscan | dev-support@ampleforth.org | | | Aragon | ANT | Etherscan | security@aragon.org | Bug bounty | | Augur | REP | Etherscan | bounty@augur.net | Bug bounty | | Aurora | AOA | Etherscan | info@aurorachain.io | | | Bancor | BNT | Etherscan | contact@bancor.network | | | Banker Token | BNK | Etherscan | technical@bankera.com | | | Basic Attention Token | BAT | | security@brave.com | Bug bounty | Bibox Token | BIX | Etherscan | | | | Binance Coin | BNB | Etherscan | security@binance.com | Bug Bounty | | Bloom | BLT | Etherscan | team@bloom.co | | | Brickblock | BBK | Etherscan | security@brickblock.io | | | Bytom | BTM | Etherscan | contact@bytom.io | | | ChainLink | LINK | Etherscan | security@chain.link | | | CyberMiles | CMT | Etherscan | contact@cybermiles.io | | | Dai | DAI | Etherscan | infosec@makerdao.com | | | Decentraland | MANA | Etherscan | hello@decentraland.org | | | DentaCoin | DCN | Etherscan | founder@dentacoin.com | | | DigixDAO | DGD | | | | | Dropil | DROP | Etherscan | support@dropil.com | | | EToken Assets | | List of Assets | security@ambisafe.com | Many tokens are issued with EToken | | Dynamic Trading Rights | DTR | Etherscan | security@tokens.net | | | FEE Token| FEE | Etherscan | info@leverj.io | | | FunFair | FUN | Etherscan | info@funfair.io | | | Gnosis | GNO | Etherscan | info@gnosis.pm | | | Golem | GNT | Etherscan | contact@golem.network | | | Holo | HOT | Etherscan | info@holo.host | | | Hubiits | HBT | Etherscan | security@hubii.com | | | Immutable X | IMX | Etherscan | security@immutable.com | | | IOST | IOST | Etherscan | team@iost.io | | | Jigstack | STAK | Etherscan | hello@jigstack.org | | | Kin | KIN | Etherscan | | | | KuCoin Shares | KCS | Etherscan | support@kucoin.com | | | Kyber Network | KNC | Etherscan | hello@kyber.network | | | Ledgerium | LGUM | Etherscan | security@ledgerium.net | | | Leverj | LEV | Etherscan | info@leverj.io | | | Loopring | LRC | Etherscan | bounty@loopring.org | Bug bounty | | Loom Network | LOOM | Etherscan | security@loomx.io | | | Mainframe | MFT | Etherscan | security@mainframe.com | | | Maker | MKR | Etherscan | | | | Melon Token | MLN | | security@melonport.com | Bug bounty | | Monaco | MCO | Etherscan | contact@mco.crypto.com | | | Mithril | MITH | Etherscan | | | | Mixin | XIN | Etherscan | contact@mixin.one | | | MUI Token | MUI | Etherscan | wallet@sovereignwallet.network | | | Nahmii | NII | Etherscan | security@hubii.com | | | Nectar | NEC | Etherscan | bounty@ethfinex.com | | | NuCypher | NU | | security@nucypher.com | | | Nuls | NULS | Etherscan | hi@nuls.io | | | Numeraire | NMR | Etherscan | security@numer.ai | | | ODEM | ODEM | Etherscan | info@odem.io | | | OmiseGO | OMG | Etherscan | | | | Orderbook BTC | OBTC | Etherscan | security@orderbook.io | Instructions | | Orderbook USD | OUSD | Etherscan | security@orderbook.io | Instructions | | Paypex | PAYX | Etherscan | contact@paypex.org | | | POA20 Bridge| POA20 | Etherscan | security@poanetwork.com |Security page | | PolySwarm | NCT | Etherscan | security@polyswarm.io | Security page | | Polymath | POLY | Etherscan | support@polymath.zendesk.com | Bug bounty | | Populous | PPT | Etherscan | info@populous.co | | | Power Ledger | POWR | Etherscan | support@powerledger.io | | | Pundi X | NPXS | Etherscan | contact@pundix.com | | | QASH | QASH | Etherscan | | | | Quantstamp| QSP | Etherscan | security@quantstamp.com | Bug bounty | | RChain | RHOC | Etherscan | | | | Ren | REN | Etherscan | | | | Sai | SAI | Etherscan | | | | | Salt | SALT | Etherscan | salt_security@saltlending.com | | | SelfKey | KEY | Etherscan | help@selfkey.org | | | | SpankChain | SPANK | Etherscan | security@spankchain.com | | | Synthetix | SNX | Proxy Underlying | security@synthetix.io | | | Synths (all flavors) | sUSD, sETH, etc | Proxy sUSD | security@synthetix.io | | | Status | SNT | Etherscan | security@status.im | | | Storj | STORJ | Etherscan | hello@storj.io | | | Tellor | TRB | Etherscan | info@tellor.io | | | TenX | PAY | Etherscan | team@tenx.tech | | | Tether | USDT | Etherscan | security@tether.to , security@bitfinex.com | | | TrueUSD | TUSD | Etherscan | hello@trusttoken.com | | | USDCoin | USDC | Etherscan | usdc-security@circle.com | | | Veritaseum | VERI | Etherscan | | | | Waltonchain | WTC | Etherscan | info@waltonchain.org | | | WAX | WAX | Etherscan | support@wax.io | | | Zilliqa | ZIL | Etherscan | security@zilliqa.com | |

ERC721 Tokens

| Name | Mainnet Address | Contact | More Info | | --- | --- | --- | --- | | CryptoKitties (CK) | Etherscan | | | | Gods Unchained (GODS) | Etherscan | security@immutable.com | |

Exchanges

| Name | Contact | More Info | | --- | --- | --- | | A1 Exchange | contact@a1.exchange | | | BCEX | business@bcex.top, service@bcex.top | | | Bankera Exchange | technical@bankera.com | | | Bibox | support@bibox.zendesk.com | | | Binance | security@binance.com | Bug Bounty | | Bitaccess | security@bitaccess.ca | Bug bounty | | Bittrex | security-reports@bittrex.com | | | Bit-Z | safe@bit-z.pro | | | Bitfinex | security@bitfinex.com | | | bitFlyer | security@bitflyer.com | | | Bitforex | support@bitforex.com, report@bitforex.com | | | Bitso | security@bitso.com | | | Bitstamp | security@bitstamp.net | | | BitMEX | support@bitmex.com | Security page | | Blockchain | security@blockchain.com | Bug bounty | | Coinbase | | Bug bounty | | Coinbene | support@coinbene.com | | | Coinbit | cs@coinbit.co.kr | | | CoinExchange | support@coinexchange.io | | | Coinfinity | security@coinfinity.co (PGP) | Security page | | Coinify | security@coinify.com | | | Coinsquare | security@coinsquare.com | | | Coinsuper | customer.support@coinsuper.com | | | CoinSwitch | security@coinswitch.co | | | CryptoFacilities | contact@cryptofacilities.com | | | Digifinex | support@digifinex.com | | | DOBI | service@dobitrade.com | | | Ethfinex | security@ethfinex.com | | | Exmo | admin@exmo.com | | | EXX | support@exx.com | | | Faa.st | security@faa.st |Bug bounty | | Gemini Trust | security@gemini.com | Security page | | HitBTC | relations@hitbtc.com, legal@hitbtc.com | | | Huobi Global | sec@huobi.com | Security page| | ICONOMI | security@iconomi.com | | | IDAX | service@idax.mn | | | Kraken | bugbounty@kraken.com | Bug Bounty | | Leverj | info@leverj.io | leverj.io | | Lopeer | support@lopeer.com | lopeer.com | | OKEx | support@okex.com, lawenforcement@okex.com | | | Orderbook | security@orderbook.io | Instructions | | Poloniex | poloniex-security@circle.com | | | qTrade.io | security@qtrade.io | | | QuadrigaCX | security@quadrigacx.com | | | SFOX | security@sfox.com | Bug Bounty | | ShapeShift | security@shapeshift.io | Disclosure Program | | SpectroCoin | technical@spectrocoin.com | Bug bounty | | Trade.io | security@trade.io | | | Tokens | security@tokens.net | Security page | | ZBG | sp@zbg.com | |

Infrastructure

| Name | Contact | More Info | | --- | --- | --- | | Ambisafe SaaS | security@ambisafe.com | | | Etherscan | | | | GasTracker | splix@gastracker.io | | | Infura | security@infura.io | | | PegaSys | security@pegasys.tech | For Pantheon, Orion, and Artemis: Ethereum 1.0/2.0/EEA clients | | SafeBlocks Firewall | support@safeblocks.io | | | Upvest | security@upvest.co | | | QuikNode | info@quiknode.io | | | Vyper | security@vyperlang.org | Security Policy |

Wallets

| Name | Contact | More info | | --- | --- | --- | | Ambisafe CryptoWallet | security@ambisafe.com | | | Arkane | info@arkane.network | | | Blockchain | security@blockchain.com| Bug bounty | | BitGo | InfoSec@bitgo.com | https://bugcrowd.com/engagements/bitgo-mbb-og-public | | Emerald Wallet | security@etcdevteam.com | | | Groundhog | security@groundhog.network | | | KeepKey | security@shapeshift.io | Disclosure Program | Ledger | security@ledger.fr | Bug bounty | | MetaMask | security@metamask.io | Bug bounty | | MyCrypto | security@mycrypto.com | Disclosure Program | | MyEtherWallet | security@myetherwallet.com | Bug bounty | | Parity | bugbounty@parity.io | Bug bounty | | SelfKey | help@selfkey.org | | | SovereignWallet | wallet@sovereignwallet.network | | | Trustwallet | support@trustwalletapp.com | | | Unchained Capital | secure@unchained-capital.com | Bug Bounty | Upvest | security@upvest.co | |