Contact

Until OWNER publishes a dedicated security mailbox, use hello@rtp.sh with subject SECURITY.

What to send

• Network and contract addresses (from the deployment list, or hashes if unpublished)
• A description of the behavior
• Reproduction against a local fork if you have one
• Your preferred contact

Do not include a public proof-of-concept that would let a third party drain funds.

What happens

OWNER will confirm receipt. There is no published SLA on this page yet. If a bounty program is live, Bug bounty overrides informal intake.