We support security updates for the latest released version of the StreamFi contracts and SDK.
| Version | Supported |
|---|---|
| latest | ✅ |
If you discover a security vulnerability or a malicious pull request, please report it privately to the maintainers.
Please include:
- A clear description of the issue
- Steps to reproduce (if applicable)
- Affected versions or commit range
- Any suggested remediation
We aim to acknowledge reports within 72 hours and will keep you informed throughout the disclosure process.
- Reports are handled confidentially.
- We will investigate and, if confirmed, work to remediate the issue.
- Once a fix is released, we will publish a security advisory and credit the reporter (unless anonymity is requested).
- Public disclosure of unresolved vulnerabilities is discouraged before a fix is available.