This project is currently in active development for the Starknet Re{Solve} Hackathon.
| Version | Supported |
|---|---|
| 1.0.x | β |
We take the security of our hackathon project seriously. If you discover a security vulnerability, please follow these steps:
Please DO NOT create a public GitHub issue for security vulnerabilities.
Instead, please email us at: security@your-domain.com
Please include the following information in your report:
- Description: A clear description of the vulnerability
- Steps to Reproduce: Detailed steps to reproduce the issue
- Impact: What an attacker could achieve
- Affected Components: Which parts of the system are affected
- Cairo Smart Contracts
- React Frontend
- Wallet Integration
- Mobile App
- Gaming Contracts
- Privacy Features
- Acknowledgment: Within 24 hours
- Initial Assessment: Within 72 hours
- Status Update: Weekly until resolved
We believe in responsible disclosure and will:
- Acknowledge your contribution
- Work with you to understand and resolve the issue
- Credit you in our security acknowledgments (if desired)
- Consider bug bounty rewards for significant findings
Our project implements several security measures:
- Smart Contract Security: OpenZeppelin contracts and patterns
- Frontend Security: Content Security Policy, HTTPS only
- Wallet Security: Secure connection protocols
- Code Review: All changes reviewed before merge
- Dependency Scanning: Regular updates and vulnerability checks
This project is designed with security in mind:
- Testnet Only: All demonstrations use Sepolia testnet
- Audited Libraries: OpenZeppelin and established patterns
- No Private Keys: Frontend never handles private keys directly
- Secure Defaults: Conservative security settings throughout
Thank you for helping make our hackathon project more secure! π‘οΈ