Security Policy for ensurance.app

Important Notice

This is a Web3 application that interacts with blockchain networks and smart contracts. Please be aware that:

Financial Risk: Any transactions involving cryptocurrencies, tokens, or digital assets carry inherent risks
Smart Contract Risk: While we strive for security, smart contracts may contain vulnerabilities
Transaction Finality: Blockchain transactions are irreversible
Wallet Security: Your wallet and private keys are your responsibility
Network Conditions: Transaction success depends on network conditions and gas prices

Use At Your Own Risk

Always verify transaction details before signing
Never share your private keys or seed phrases
Be cautious of phishing attempts
Test with small amounts first
Keep your software and wallets updated

Reporting a Vulnerability

If you discover a security vulnerability, please:

DO NOT disclose it publicly
Send a detailed report to tmo @ basin.global
Include:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Any suggested fixes (if available)

Smart Contract Security

For issues related to:

BASIN smart contracts: Contact BASIN directly
SITUS contracts: Report through the SITUS security process
ElizaOS: Follow ElizaOS security procedures

Frontend Security

For frontend-specific security issues:

Check if the issue is already reported
Submit a confidential security report
Allow us reasonable time to respond and fix

We take security seriously and will respond as quickly as possible to all legitimate reports.