Contact: mailto:security@orbithooks.money
Expires: 2027-09-29T00:00:00.000Z
Preferred-Languages: en
Canonical: https://orbithooks.money/.well-known/security.txt
Policy: https://orbithooks.money/.well-known/security.txt

# Orbit Hooks security policy
#
# Scope: the Orbit Hooks programs on Solana mainnet-beta and https://orbithooks.money.
#   core (trellis)   95NpYm3RggbJt8quV8XW74YUeUdSm2eQAVoQ89Sogax6
#   orbit-mechanics  6epGQwvAmgG1YUUHHZtynCXSh6ZjbDqvsrV6hwNf6P8h
#   orbit-launchpad  HZpL2omA5uGDGZgdjdhygFhSUQn2NHpRqhmZGYZE9BQn
# The programs are unaudited and upgradeable by the Orbit team. Internal reviews: https://orbithooks.money/proof
#
# Reporting: email security@orbithooks.money with the affected program or page, the impact, and steps or a
# transaction/simulation that reproduces it. Please do not open public issues for vulnerabilities.
#
# Rules: test only against your own accounts, a local validator or devnet; never against other users' funds.
# Do not run denial-of-service or spam against the site or RPC. Give us reasonable time to fix before disclosure.