This repository is a method and a test kit. It holds no deployed contract, no keys and no funds. Nothing here is audited, and the README says so.

If you find a problem IN THE KIT - a gate that passes when it should fail, a doctrine sentence that is wrong about Uniswap v4 or Foundry, a script that can damage a project it was pointed at - open a GitHub issue - or, when the problem is a way to make a gate pass falsely that someone could use to ship a misleading dossier, use GitHub's private vulnerability reporting on this repository first, so it can be fixed before the recipe is public. Those are the findings we want, and the three review passes in the README are the shape we expect them in: the sentence quoted, what is wrong with it, and how you showed it.

If you find a vulnerability in a hook you built WITH this kit, that is yours to disclose to your own users; the kit does not stand between you and them.

There is no bug bounty.