This is testnet software and holds no real funds, but the design is intended to be audited and later hardened.

Please do not open a public issue for a vulnerability. Email anasabubakar7000@gmail.com with a description, reproduction steps and impact. Expect an acknowledgement within a few days.

Particularly interesting: any way to change the destination or amount of a payment, bypass idempotency, obtain a receipt without a matching confirmed transaction, or make the ledger verify after tampering.