Security Disclosure Policy

Send suspected vulnerabilities to ops@rewardio.cash with affected route, reproduction steps, impact, logs, and your contact details. Do not access, modify, exfiltrate, or publish user data.

Testing must not degrade service, attack third parties, bypass payment systems, drain wallets, spam users, or break platform rules.

This policy does not create a guaranteed bug bounty, safe harbor, contract, or compensation promise. Rewards, credit, or remediation timelines are discretionary unless a separate written program says otherwise.

We may preserve logs and evidence for security, abuse prevention, legal review, and operational continuity.