Only the latest published release receives security fixes. Defi is currently alpha software.

Please report suspected vulnerabilities privately through GitHub's vulnerability reporting form.

Do not disclose vulnerabilities in public issues or discussions before a fix or mitigation is available.

Include:

• The affected Defi and macOS versions.
• Steps to reproduce the issue.
• The potential security impact.

Remove passwords, tokens, and unrelated personal information from any logs or attachments.

Reports are handled on a best-effort basis, with no guaranteed response time. We will discuss findings and next steps through the private report. For confirmed vulnerabilities, we will coordinate a fix or mitigation and disclosure. If a report is declined, we will explain why.

For non-security bugs, please use GitHub Issues.