Directory of security contacts for blockchain companies
See the codeREADME
Blockchain Security Contacts
This directory is a community-curated resource for contacting security teams. It identifies the best way to contact an organization's security team so that hackers can report vulnerabilities directly to the organizations that can resolve them.
This document is a work in progress. We're happy to accept feedback, questions, or ideas for improvements. File an issue or join us on Slack to talk further.
Recommendations
- Refer to disclose.io for vulnerability disclosure program best practices
- Don't make researchers agree to terms to report security issues to you
- Create a security@ email address that delivers directly to your engineering team
Blockchains
Decentralized Applications
Decentralized Exchanges (DEXs)
| Name | Deployed Addresses | Contact | More info |
|---|---|---|---|
| AirSwap | Etherscan | bounty@airswap.io | |
| DDEX | Etherscan | security@ddex.io | |
| Enclaves | contact@enclaves.io | ||
| Leverj | Custodian | info@leverj.io | leverj.io |
| Orderbook | Etherscan | security@orderbook.io | Instruction |
| Synthetix | security@synthetix.io | ||
| UniSwap | contact@uniswap.io |
ERC20 Tokens
ERC721 Tokens
| Name | Mainnet Address | Contact | More Info |
|---|---|---|---|
| CryptoKitties (CK) | Etherscan | ||
| Gods Unchained (GODS) | Etherscan | security@immutable.com |
Exchanges
Infrastructure
| Name | Contact | More Info |
|---|---|---|
| Ambisafe SaaS | security@ambisafe.com | |
| Etherscan | ||
| GasTracker | splix@gastracker.io | |
| Infura | security@infura.io | |
| PegaSys | security@pegasys.tech | For Pantheon, Orion, and Artemis: Ethereum 1.0/2.0/EEA clients |
| SafeBlocks Firewall | support@safeblocks.io | |
| Upvest | security@upvest.co | |
| QuikNode | info@quiknode.io | |
| Vyper | security@vyperlang.org | Security Policy |
Wallets
| Name | Contact | More info |
|---|---|---|
| Ambisafe CryptoWallet | security@ambisafe.com | |
| Arkane | info@arkane.network | |
| Blockchain | security@blockchain.com | Bug bounty |
| BitGo | InfoSec@bitgo.com | https://bugcrowd.com/engagements/bitgo-mbb-og-public |
| Emerald Wallet | security@etcdevteam.com | |
| Groundhog | security@groundhog.network | |
| KeepKey | security@shapeshift.io | Disclosure Program |
| Ledger | security@ledger.fr | Bug bounty |
| MetaMask | security@metamask.io | Bug bounty |
| MyCrypto | security@mycrypto.com | Disclosure Program |
| MyEtherWallet | security@myetherwallet.com | Bug bounty |
| Parity | bugbounty@parity.io | Bug bounty |
| SelfKey | help@selfkey.org | |
| SovereignWallet | wallet@sovereignwallet.network | |
| Trustwallet | support@trustwalletapp.com | |
| Unchained Capital | secure@unchained-capital.com | Bug Bounty |
| Upvest | security@upvest.co |
blockchain
directory
email
ethereum
security
Similar repos
Directory of security contacts for blockchain companies
See the codeREADME
Blockchain Security Contacts
This directory is a community-curated resource for contacting security teams. It identifies the best way to contact an organization's security team so that hackers can report vulnerabilities directly to the organizations that can resolve them.
This document is a work in progress. We're happy to accept feedback, questions, or ideas for improvements. File an issue or join us on Slack to talk further.
Recommendations
- Refer to disclose.io for vulnerability disclosure program best practices
- Don't make researchers agree to terms to report security issues to you
- Create a security@ email address that delivers directly to your engineering team
Blockchains
Decentralized Applications
Decentralized Exchanges (DEXs)
| Name | Deployed Addresses | Contact | More info |
|---|---|---|---|
| AirSwap | Etherscan | bounty@airswap.io | |
| DDEX | Etherscan | security@ddex.io | |
| Enclaves | contact@enclaves.io | ||
| Leverj | Custodian | info@leverj.io | leverj.io |
| Orderbook | Etherscan | security@orderbook.io | Instruction |
| Synthetix | security@synthetix.io | ||
| UniSwap | contact@uniswap.io |
ERC20 Tokens
ERC721 Tokens
| Name | Mainnet Address | Contact | More Info |
|---|---|---|---|
| CryptoKitties (CK) | Etherscan | ||
| Gods Unchained (GODS) | Etherscan | security@immutable.com |
Exchanges
Infrastructure
| Name | Contact | More Info |
|---|---|---|
| Ambisafe SaaS | security@ambisafe.com | |
| Etherscan | ||
| GasTracker | splix@gastracker.io | |
| Infura | security@infura.io | |
| PegaSys | security@pegasys.tech | For Pantheon, Orion, and Artemis: Ethereum 1.0/2.0/EEA clients |
| SafeBlocks Firewall | support@safeblocks.io | |
| Upvest | security@upvest.co | |
| QuikNode | info@quiknode.io | |
| Vyper | security@vyperlang.org | Security Policy |
Wallets
| Name | Contact | More info |
|---|---|---|
| Ambisafe CryptoWallet | security@ambisafe.com | |
| Arkane | info@arkane.network | |
| Blockchain | security@blockchain.com | Bug bounty |
| BitGo | InfoSec@bitgo.com | https://bugcrowd.com/engagements/bitgo-mbb-og-public |
| Emerald Wallet | security@etcdevteam.com | |
| Groundhog | security@groundhog.network | |
| KeepKey | security@shapeshift.io | Disclosure Program |
| Ledger | security@ledger.fr | Bug bounty |
| MetaMask | security@metamask.io | Bug bounty |
| MyCrypto | security@mycrypto.com | Disclosure Program |
| MyEtherWallet | security@myetherwallet.com | Bug bounty |
| Parity | bugbounty@parity.io | Bug bounty |
| SelfKey | help@selfkey.org | |
| SovereignWallet | wallet@sovereignwallet.network | |
| Trustwallet | support@trustwalletapp.com | |
| Unchained Capital | secure@unchained-capital.com | Bug Bounty |
| Upvest | security@upvest.co |
blockchain
directory
email
ethereum
security