Report privately, not in a public issue: legal@bitcoinuniverse.io

Include:

• what the issue is, and how to reproduce it;
• which versions are affected;
• what an attacker could achieve.

Please allow time for a fix before publishing.

This repository holds documentation. A vulnerability in the wallet itself belongs at bitcoinuniverseio/wallet, reported to the same address.

Documentation issues that are security issues, and are treated as such here:

• a page that describes a capability the wallet does not have, in a way that could cause a loss;
• a page that omits an irreversible consequence of an action it describes;
• a link that points somewhere it should not;
• anything published here that should have stayed private.

Your recovery phrase. Not in an issue, not in a reply, not in a direct message, not to verify your identity, not to help you recover funds, not as part of any support process, in this repository or anywhere else.

Anyone who asks is committing fraud, regardless of who they appear to be.

Nobody here can recover them. That is a consequence of self-custody, not a policy that can be appealed. See If your wallet is compromised and act quickly if your recovery phrase may have been exposed.

Be aware that people who report losses publicly are contacted immediately by recovery scams. All of them are fraudulent.