Report vulnerabilities privately to contact@aifinpay.io. Do not open a public issue.

Include:

• the affected version, commit or deployment;
• steps to reproduce, using synthetic data only;
• expected and actual behaviour.

Do not include private keys, seed phrases, API keys, tokens or other credentials.

• Pavlo Svizinskyy (@enot3615): security review and vulnerability triage