Security: Responsible Disclosure Request

[davidkny22]

Hi PancakeSwap team,

I'm an independent security researcher. I've identified a critical smart contract vulnerability in this repository that could result in loss of user funds. I have a working Foundry PoC with complete reproduction steps.

I attempted to submit through your Immunefi program but ran into issues with the third-party identity verification platform (Humanode). I'll keep working on getting Immunefi access, but I wanted to reach out directly in the meantime given the severity.

Could you provide a security contact email or other private channel to share the full report? Happy to share via email, Discord DM, or any secure method you prefer.

Thank you.

[davidkny22]

Following up - I have the complete report with a full Foundry PoC ready to share immediately. If you can provide a security email or any private channel, I can send it right now. I'm also working on completing Immunefi verification to submit formally there.

Given the severity, I want to make sure this reaches your security team as quickly as possible through whatever channel works best for you.