Gluon-EVM is currently under active beta development. Security fixes target the latest version of the main branch.

Please do not disclose security vulnerabilities through public GitHub issues, pull requests, or public Discord channels.

For security-sensitive reports, contact a project maintainer privately. Maintainers are listed in MAINTAINERS.md and can be contacted by direct message through the Stability Nexus Discord server.

A vulnerability report should include, where possible:

• the affected contract or component
• the affected commit or version
• a description of the vulnerability and its impact
• steps to reproduce the issue
• a proof of concept, if available
• any suggested mitigation

Please avoid publicly sharing exploit details until the maintainers have had an opportunity to investigate and address the issue.

Maintainers aim to acknowledge security reports within 14 days and will coordinate remediation and disclosure with the reporter when appropriate.

Non-security bugs and feature requests should continue to be reported through the project's GitHub Issues.