Please report security problems privately, not in a public issue:
- use Report a vulnerability in the Security tab of the repository concerned, or
- email security@usehyperodds.com.
Include what you found, how to reproduce it and what an attacker could do with it. We aim to reply within three working days, keep you updated while we fix it, and credit you in the advisory unless you would rather we did not.
This covers Hyperodds' open-source repositories, the console at usehyperodds.com and everything served from api.usehyperodds.com, including the MCP server. Issues in Hyperliquid, Polymarket, Kalshi or other third parties belong with them.