Skip to content

Security: edumor/starknet-resolve-hackathon

Security

SECURITY.md

Security Policy

Supported Versions

This project is currently in active development for the Starknet Re{Solve} Hackathon.

Version Supported
1.0.x βœ…

Reporting a Vulnerability

We take the security of our hackathon project seriously. If you discover a security vulnerability, please follow these steps:

πŸ”’ Private Disclosure

Please DO NOT create a public GitHub issue for security vulnerabilities.

Instead, please email us at: security@your-domain.com

πŸ“‹ What to Include

Please include the following information in your report:

  • Description: A clear description of the vulnerability
  • Steps to Reproduce: Detailed steps to reproduce the issue
  • Impact: What an attacker could achieve
  • Affected Components: Which parts of the system are affected
    • Cairo Smart Contracts
    • React Frontend
    • Wallet Integration
    • Mobile App
    • Gaming Contracts
    • Privacy Features

⏱️ Response Timeline

  • Acknowledgment: Within 24 hours
  • Initial Assessment: Within 72 hours
  • Status Update: Weekly until resolved

πŸ† Responsible Disclosure

We believe in responsible disclosure and will:

  1. Acknowledge your contribution
  2. Work with you to understand and resolve the issue
  3. Credit you in our security acknowledgments (if desired)
  4. Consider bug bounty rewards for significant findings

πŸ” Security Measures

Our project implements several security measures:

  • Smart Contract Security: OpenZeppelin contracts and patterns
  • Frontend Security: Content Security Policy, HTTPS only
  • Wallet Security: Secure connection protocols
  • Code Review: All changes reviewed before merge
  • Dependency Scanning: Regular updates and vulnerability checks

Security Considerations for Hackathon Judges

This project is designed with security in mind:

  • Testnet Only: All demonstrations use Sepolia testnet
  • Audited Libraries: OpenZeppelin and established patterns
  • No Private Keys: Frontend never handles private keys directly
  • Secure Defaults: Conservative security settings throughout

Thank you for helping make our hackathon project more secure! πŸ›‘οΈ

There aren't any published security advisories