DyorHQ · Security
Security & responsible disclosure.
We welcome good-faith security research. Please report potential vulnerabilities responsibly using the policy below.
How to report
Email team@dyorhq.fun with "Security" in the subject. Include what you found, steps to reproduce, and the impact. Please don't share it publicly until we've fixed it.
In scope
The DyorHQ iPhone app, dyorhq.fun, accounts.dyorhq.fun, and DyorHQ's smart contracts on Monad.
Out of scope
Third-party services we integrate with (Privy, Perpl, Kuru, Uniswap, Monday Trade, Aurora), social engineering, physical attacks, denial of service, spam, and reports from automated scanners with no demonstrated impact.
Safe harbor
We won't take legal action against good-faith research that follows this policy, avoids privacy violations, data destruction and service disruption, doesn't touch funds or data that aren't yours, and gives us reasonable time to fix.
Our response
We acknowledge within 3 business days and keep you updated. We don't run a formal bug bounty yet.