This page is a community-curated resource for contacting security teams. It identifies the best way to contact an organization's security team so that hackers can report vulnerabilities directly to the organizations that can resolve them.
This document is a work in progress. We're happy to accept feedback, questions, or ideas for improvements. File an issue or join us on Slack to talk further.
Refer to disclose.io for vulnerability disclosure program best practices
Don't make researchers agree to terms to report security issues to you
Create a security@ email address that delivers directly to your engineering team
| Name | Contact | More info |
| ---------------- | ------------------------------------------------------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------- | --- |
| Aptos | security@aptoslabs.com | |
| Arweave | team@arweave.org | |
| Auroracoin | m.hannes@auroracoin.is | |
| Bitcoin | security@bitcoincore.org | Security page |
| Bitcoin Cash | |
| Bitcoin Gold | admin@bitcoingold.org | Disclosure policy |
| Bitshares | contactbitshares@bitshares.org |
| Bytecoin | contact@bytecoin.org |
| Cloakcoin | anorak@cloakcoin.com | |
| Decred | contact@decred.org |
| DogeCoin | | |
| Edgeware | security@commonwealth.im | | |
| Ethereum | bounty@ethereum.org | Bug bounty |
| Ethereum Classic | security@etcdevteam.com | |
| Horizen | security@horizen.global | Bug bounty |
| Hush | hushteam@protonmail.com | Security Page |
| ICON | hello@icon.foundation | |
| IOV | security@iov.one | |
| Komodo | security@komodoplatform.com | |
| Litecoin | contact@litecoin.org | |
| Nem | contact@nem.io | |
| Neo | contact@neo.org | |
| Monero | Multiple | Bug bounty |
| Ontology | contact@ont.io | |
| POA Core | security@poanetwork.com | Security page |
| Ripple | bugs@ripple.com | Bug bounty |
| RSK | security@rsk.co | Bug bounty |
| Sia | hello@sia.tech | |
| Steem | | |
| Tezos | security@tezos.com | Bug bounty |
| Qtum | | |
| Quorum | quorum_info@jpmorgan.com | |
| VeChain | | |
| xDai Chain | security@poanetwork.com | Security page |
| ZCash | security@z.cash | Security page |
Name Deployed Addresses Contact More info
0x team@0xproject.com Bug bounty 1Hive Bug bounty AAVE security@aave.com Ampleforth External Reference dev-support@ampleforth.org Aragon External Reference security@aragon.org Bug bounty Bamboo Relay dex@bamboorelay.com Bancor Network security@bancor.network BarterDEX Network security@komodoplatform.com Bloom team@bloom.co bZx security@bzx.network C-Layer External Reference security@c-layer.org Commonwealth.im security@commonwealth.im Compound Finance security@compound.finance Connext support@connext.network Cozy Finance security@cozy.finance Decentraland Bug bounty Decentralized Vulnerability Platform service@dvpnet.io Democracy Earth hello@democracy.earth Dharma security@dharma.io Erasure / Numerai External Reference security@numer.ai Ethfinex bounty@ethfinex.com Giveth External Reference Idle Finance External Reference security@idle.finance InstaDApp External Reference info@instadapp.io Kleros External Reference contact@kleros.io Bug bounty Kyber Network hello@kyber.network LivePeer External Reference security@livepeer.org Melon security@melonport.com Nahmii security@hubii.com Nexus Mutual security@nexusmutual.io Raiden Network bounty@raiden.network Reimagined Finance security@reimagined.fi RenEx security@republicprotocol.com Sablier External Reference hello@sablier.finance Sandclock security@sandclock.org Set Protocol security@setprotocol.com Bug bounty Solidified info@solidified.io Sovryn External Reference Bug bounty Status.im security@status.im Bug bounty
Name Deployed Addresses Contact More info
AirSwap Etherscan bounty@airswap.io DDEX Etherscan security@ddex.io Enclaves contact@enclaves.io Leverj Custodian info@leverj.io leverj.io Orderbook Etherscan security@orderbook.io Instruction Synthetix security@synthetix.io UniSwap contact@uniswap.io
| Name | Ticker | Mainnet Address | Contact | More info |
| ---------------------- | --------------- | ------------------------------------------------------------------------------------------------------------- | ------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------------- | --- |
| Aelf | ELF | Etherscan | contact@aelf.io | |
| Aeternity | AE | Etherscan | info@aeternity.com | |
| Aion | AION | Etherscan | hello@aion.network | |
| AirSwap | AST | Etherscan | bounty@airswap.io | Bug bounty |
| Ampleforth | AMPL | Etherscan | dev-support@ampleforth.org | |
| Aragon | ANT | Etherscan | security@aragon.org | Bug bounty |
| Augur | REP | Etherscan | bounty@augur.net | |
| Aurora | AOA | Etherscan | info@aurorachain.io | |
| Bancor | BNT | Etherscan | contact@bancor.network | |
| Banker Token | BNK | Etherscan | technical@bankera.com | |
| Basic Attention Token | BAT | | security@brave.com | Bug bounty |
| Bibox Token | BIX | Etherscan | | |
| Binance Coin | BNB | Etherscan | security@binance.com | Bug Bounty |
| Bloom | BLT | Etherscan | team@bloom.co | |
| Brickblock | BBK | Etherscan | security@brickblock.io | |
| Bytom | BTM | Etherscan | contact@bytom.io | |
| ChainLink | LINK | Etherscan | security@chain.link | |
| CyberMiles | CMT | Etherscan | contact@cybermiles.io | |
| Dai | DAI | Etherscan | infosec@makerdao.com | |
| Decentraland | MANA | Etherscan | hello@decentraland.org | |
| DentaCoin | DCN | Etherscan | founder@dentacoin.com | |
| DigixDAO | DGD | | | |
| Dropil | DROP | Etherscan | support@dropil.com | |
| EToken Assets | | | security@ambisafe.com | Many tokens are issued with EToken |
| Dynamic Trading Rights | DTR | Etherscan | security@tokens.net | |
| FEE Token | FEE | Etherscan | info@leverj.io | |
| FunFair | FUN | Etherscan | info@funfair.io | |
| Gnosis | GNO | Etherscan | info@gnosis.pm | |
| Golem | GNT | Etherscan | contact@golem.network | |
| Holo | HOT | Etherscan | info@holo.host | |
| Hubiits | HBT | Etherscan | security@hubii.com | |
| Immutable X | IMX | Etherscan | security@immutable.com | |
| IOST | IOST | Etherscan | team@iost.io | |
| Jigstack | STAK | Etherscan | hello@jigstack.org | |
| Kin | KIN | Etherscan | | |
| KuCoin Shares | KCS | Etherscan | support@kucoin.com | |
| Kyber Network | KNC | Etherscan | hello@kyber.network | |
| Ledgerium | LGUM | Etherscan | security@ledgerium.net | |
| Leverj | LEV | Etherscan | info@leverj.io | |
| Loopring | LRC | Etherscan | bounty@loopring.org | Bug bounty |
| Loom Network | LOOM | Etherscan | security@loomx.io | |
| Mainframe | MFT | Etherscan | security@mainframe.com | |
| Maker | MKR | Etherscan | | |
| Melon Token | MLN | | security@melonport.com | |
| Monaco | MCO | Etherscan | contact@mco.crypto.com | |
| Mithril | MITH | Etherscan | | |
| Mixin | XIN | Etherscan | contact@mixin.one | |
| MUI Token | MUI | Etherscan | wallet@sovereignwallet.network | |
| Nahmii | NII | Etherscan | security@hubii.com | |
| Nectar | NEC | Etherscan | bounty@ethfinex.com | |
| NuCypher | NU | | security@nucypher.com | |
| Nuls | NULS | Etherscan | hi@nuls.io | |
| Numeraire | NMR | Etherscan | security@numer.ai | |
| ODEM | ODEM | Etherscan | info@odem.io | |
| OmiseGO | OMG | Etherscan | | |
| Orderbook BTC | OBTC | Etherscan | security@orderbook.io | Instructions |
| Orderbook USD | OUSD | Etherscan | security@orderbook.io | Instructions |
| Paypex | PAYX | Etherscan | contact@paypex.org | |
| POA20 Bridge | POA20 | Etherscan | security@poanetwork.com | Security page |
| PolySwarm | NCT | Etherscan | security@polyswarm.io | Security page |
| Polymath | POLY | Etherscan | support@polymath.zendesk.com | Bug bounty |
| Populous | PPT | Etherscan | info@populous.co | |
| Power Ledger | POWR | Etherscan | support@powerledger.io | |
| Pundi X | NPXS | Etherscan | contact@pundix.com | |
| QASH | QASH | Etherscan | | |
| Quantstamp | QSP | Etherscan | security@quantstamp.com | |
| RChain | RHOC | Etherscan | | |
| Ren | REN | Etherscan | | |
| Sai | SAI | Etherscan | | | |
| Salt | SALT | Etherscan | salt_security@saltlending.com | |
| SelfKey | KEY | Etherscan | help@selfkey.org | | |
| SpankChain | SPANK | Etherscan | security@spankchain.com | |
| Synthetix | SNX | Proxy Underlying | security@synthetix.io | |
| Synths (all flavors) | sUSD, sETH, etc | Proxy sUSD | security@synthetix.io | |
| Status | SNT | Etherscan | security@status.im | |
| Storj | STORJ | Etherscan | hello@storj.io | |
| Tellor | TRB | Etherscan | info@tellor.io | |
| TenX | PAY | Etherscan | team@tenx.tech | |
| Tether | USDT | Etherscan | security@tether.to , security@bitfinex.com | |
| TrueUSD | TUSD | Etherscan | hello@trusttoken.com | |
| USDCoin | USDC | Etherscan | usdc-security@circle.com | |
| Veritaseum | VERI | Etherscan | | |
| Waltonchain | WTC | Etherscan | info@waltonchain.org | |
| WAX | WAX | Etherscan | support@wax.io | |
| Zilliqa | ZIL | Etherscan | security@zilliqa.com | |
Name Mainnet Address Contact More Info
CryptoKitties (CK) Etherscan Gods Unchained (GODS) Etherscan security@immutable.com
Name Contact More Info
A1 Exchange contact@a1.exchange BCEX business@bcex.top, service@bcex.top Bankera Exchange technical@bankera.com Bibox support@bibox.zendesk.com Binance security@binance.com Bug Bounty Bitaccess security@bitaccess.ca Bug bounty Bittrex security-reports@bittrex.com Bit-Z safe@bit-z.pro Bitfinex security@bitfinex.com bitFlyer security@bitflyer.com Bitforex support@bitforex.com, report@bitforex.com Bitso security@bitso.com Bitstamp security@bitstamp.net BitMEX support@bitmex.com Security page Blockchain security@blockchain.com Bug bounty Coinbase Bug bounty Coinbene support@coinbene.com Coinbit cs@coinbit.co.kr CoinExchange support@coinexchange.io Coinfinity security@coinfinity.co Security page Coinify security@coinify.com Coinsquare security@coinsquare.com Coinsuper customer.support@coinsuper.com CoinSwitch security@coinswitch.co CryptoFacilities contact@cryptofacilities.com Digifinex support@digifinex.com DOBI service@dobitrade.com Ethfinex security@ethfinex.com Exmo admin@exmo.com EXX support@exx.com Faa.st security@faa.st Bug bounty Gemini Trust security@gemini.com HitBTC relations@hitbtc.com, legal@hitbtc.com Huobi Global sec@huobi.com ICONOMI security@iconomi.com IDAX service@idax.mn Kraken bugbounty@kraken.com Leverj info@leverj.io leverj.io Lopeer support@lopeer.com lopeer.com OKEx support@okex.com, lawenforcement@okex.com Orderbook security@orderbook.io Instructions Poloniex poloniex-security@circle.com qTrade.io security@qtrade.io QuadrigaCX security@quadrigacx.com SFOX security@sfox.com Bug Bounty ShapeShift security@shapeshift.io SpectroCoin technical@spectrocoin.com Bug bounty Trade.io security@trade.io Tokens security@tokens.net ZBG sp@zbg.com
Name Contact More Info
Ambisafe SaaS security@ambisafe.com Etherscan GasTracker splix@gastracker.io Infura security@infura.io PegaSys security@pegasys.tech For Pantheon, Orion, and Artemis: Ethereum 1.0/2.0/EEA clients SafeBlocks Firewall support@safeblocks.io Upvest security@upvest.co QuikNode info@quiknode.io Vyper security@vyperlang.org Security Policy
Name Contact More info
Ambisafe CryptoWallet security@ambisafe.com Arkane info@arkane.network Blockchain security@blockchain.com Bug bounty BitGo secteam@bitgo.com Emerald Wallet security@etcdevteam.com Groundhog security@groundhog.network KeepKey security@shapeshift.io Ledger security@ledger.fr Bug bounty MetaMask security@metamask.io Bug bounty MyCrypto security@mycrypto.com Disclosure Program MyEtherWallet security@myetherwallet.com Bug bounty Parity bugbounty@parity.io Bug bounty SelfKey help@selfkey.org SovereignWallet wallet@sovereignwallet.network Trustwallet support@trustwalletapp.com Unchained Capital secure@unchained-capital.com Upvest security@upvest.co