This page is a community-curated resource for contacting security teams. It identifies the best way to contact an organization's security team so that hackers can report vulnerabilities directly to the organizations that can resolve them.
This document is a work in progress. We're happy to accept feedback, questions, or ideas for improvements. File an issue or join us on Slack to talk further.
Refer to disclose.io for vulnerability disclosure program best practices
Don't make researchers agree to terms to report security issues to you
Create a security@ email address that delivers directly to your engineering team
Name Contact More info
Aptos security@aptoslabs.com Arweave team@arweave.org Auroracoin m.hannes@auroracoin.is Bitcoin security@bitcoincore.org Security page Bitcoin CashBitcoin Gold admin@bitcoingold.org Disclosure policy Bitshares contactbitshares@bitshares.org Bytecoin contact@bytecoin.org Cloakcoin anorak@cloakcoin.com Decred contact@decred.org Edgeware security@commonwealth.im Ethereum bounty@ethereum.org Bug bounty Ethereum Classic security@etcdevteam.com Horizen security@horizen.global Bug bounty Hush hushteam@protonmail.com Security Page ICON hello@icon.foundation IOV security@iov.one Komodo security@komodoplatform.com Litecoin contact@litecoin.org Nem contact@nem.io Neo contact@neo.org Monero Multiple Bug bounty Ontology contact@ont.io POA Core security@poanetwork.com Security page Ripple bugs@ripple.com Bug bounty RSK security@rsk.co Bug bounty Sia hello@sia.tech Tezos security@tezos.com Bug bounty Quorum quorum_info@jpmorgan.com xDai Chain security@poanetwork.com Security page ZCash security@z.cash Security page
Name Deployed Addresses Contact More info
0x team@0xproject.com Bug bounty 1Hive Bug bounty AAVE security@aave.com Ampleforth External Reference dev-support@ampleforth.org Aragon External Reference security@aragon.org Bug bounty Bamboo Relay dex@bamboorelay.com Bancor Network security@bancor.network BarterDEX Network security@komodoplatform.com Bloom team@bloom.co bZx security@bzx.network C-Layer External Reference security@c-layer.org Commonwealth.im security@commonwealth.im Compound Finance security@compound.finance Connext support@connext.network Cozy Finance security@cozy.finance Decentraland Bug bounty Decentralized Vulnerability Platform service@dvpnet.io Democracy Earth hello@democracy.earth Dharma security@dharma.io Erasure / Numerai External Reference security@numer.ai Ethfinex bounty@ethfinex.com Idle Finance External Reference security@idle.finance InstaDApp External Reference info@instadapp.io Kleros External Reference contact@kleros.io Bug bounty Kyber Network hello@kyber.network LivePeer External Reference security@livepeer.org Melon security@melonport.com Nahmii security@hubii.com Nexus Mutual security@nexusmutual.io Raiden Network bounty@raiden.network Reimagined Finance security@reimagined.fi RenEx security@republicprotocol.com Sablier External Reference hello@sablier.finance Sandclock security@sandclock.org Set Protocol security@setprotocol.com Bug bounty Solidified info@solidified.io Sovryn External Reference Bug bounty Status.im security@status.im Bug bounty
Name Deployed Addresses Contact More info
AirSwap Etherscan bounty@airswap.io DDEX Etherscan security@ddex.io Enclaves contact@enclaves.io Leverj Custodian info@leverj.io leverj.io Orderbook Etherscan security@orderbook.io Instruction Synthetix security@synthetix.io UniSwap contact@uniswap.io
Name Mainnet Address Contact More Info
CryptoKitties (CK) Etherscan Gods Unchained (GODS) Etherscan security@immutable.com
Name Contact More Info
A1 Exchange contact@a1.exchange BCEX business@bcex.top, service@bcex.top Bankera Exchange technical@bankera.com Bibox support@bibox.zendesk.com Binance security@binance.com Bug Bounty Bitaccess security@bitaccess.ca Bug bounty Bittrex security-reports@bittrex.com Bit-Z safe@bit-z.pro Bitfinex security@bitfinex.com bitFlyer security@bitflyer.com Bitforex support@bitforex.com, report@bitforex.com Bitso security@bitso.com Bitstamp security@bitstamp.net BitMEX support@bitmex.com Security page Blockchain security@blockchain.com Bug bounty Coinbase Bug bounty Coinbene support@coinbene.com Coinbit cs@coinbit.co.kr CoinExchange support@coinexchange.io Coinfinity security@coinfinity.co Security page Coinify security@coinify.com Coinsquare security@coinsquare.com Coinsuper customer.support@coinsuper.com CoinSwitch security@coinswitch.co CryptoFacilities contact@cryptofacilities.com Digifinex support@digifinex.com DOBI service@dobitrade.com Ethfinex security@ethfinex.com Exmo admin@exmo.com EXX support@exx.com Faa.st security@faa.st Bug bounty Gemini Trust security@gemini.com HitBTC relations@hitbtc.com, legal@hitbtc.com Huobi Global sec@huobi.com ICONOMI security@iconomi.com IDAX service@idax.mn Kraken bugbounty@kraken.com Leverj info@leverj.io leverj.io Lopeer support@lopeer.com lopeer.com OKEx support@okex.com, lawenforcement@okex.com Orderbook security@orderbook.io Instructions Poloniex poloniex-security@circle.com qTrade.io security@qtrade.io QuadrigaCX security@quadrigacx.com SFOX security@sfox.com Bug Bounty ShapeShift security@shapeshift.io SpectroCoin technical@spectrocoin.com Bug bounty Trade.io security@trade.io Tokens security@tokens.net ZBG sp@zbg.com
Name Contact More Info
Ambisafe SaaS security@ambisafe.com Etherscan GasTracker splix@gastracker.io Infura security@infura.io PegaSys security@pegasys.tech For Pantheon, Orion, and Artemis: Ethereum 1.0/2.0/EEA clients SafeBlocks Firewall support@safeblocks.io Upvest security@upvest.co QuikNode info@quiknode.io Vyper security@vyperlang.org Security Policy
Name Contact More info
Ambisafe CryptoWallet security@ambisafe.com Arkane info@arkane.network Blockchain security@blockchain.com Bug bounty BitGo secteam@bitgo.com Emerald Wallet security@etcdevteam.com Groundhog security@groundhog.network KeepKey security@shapeshift.io Ledger security@ledger.fr Bug bounty MetaMask security@metamask.io Bug bounty MyCrypto security@mycrypto.com Disclosure Program MyEtherWallet security@myetherwallet.com Bug bounty Parity bugbounty@parity.io Bug bounty SelfKey help@selfkey.org SovereignWallet wallet@sovereignwallet.network Trustwallet support@trustwalletapp.com Unchained Capital secure@unchained-capital.com Upvest security@upvest.co