The preferred approach to report a security vulnerability is to contact the respective BIP owners and affected projects that implement a BIP. Should attempts to contact the affected parties fail, the report can be sent by email to one or more of the BIP Editors listed below. The contacted BIP Editors will make their best effort to triage the report and get in touch with the respective parties.
- Bryan Bishop (kanzure@gmail.com)
- Jon Atack (jon@atack.com)
- Mark "Murch" Erhardt (murch@murch.one)
- Olaoluwa Osuntokun (laolu32@gmail.com)
- Ruben Somsen (rsomsen@gmail.com)
Note: These email addresses are exclusively for vulnerability reporting.