Midnight Mobile is experimental software.

Report a security problem with GitHub private vulnerability reporting. Do not report security problems in a public issue, pull request, or discussion.

Include:

• The affected version or commit.
• The platform and environment.
• The possible impact.
• The access an attacker would need.
• A small, deterministic test that uses synthetic data.
• A possible fix or mitigation, if known.
• Whether anyone else has disclosed the problem.

Do not send real keys, seeds, checkpoints, credentials, private service URLs, transactions, wallet identifiers, or sensitive logs. Redact local paths and unrelated identifiers. Ask maintainers for a safe transfer method before you send any sensitive data.

Test only systems and data that you own or have permission to test. Stop if you find real wallet material or credentials. Do not damage data or reduce service availability. Get the service operator's permission before testing a public network service.