Contributing
Security Guidelines
Reporting vulnerabilities, invariant compliance, and safe cryptographic practices.
Critical security rules for developers writing contract or client code.
Security Guidelines for Contributors
- Never use unchecked math or floating-point division in contract code.
- Always assert caller authority with
require_auth()before mutating state. - Never invent mock balances in client applications; always query on-chain state or verified events.