Skip to content

Security: btc-vision/transaction

SECURITY.md

Security Policy

Verichains

Audited by Verichains

Audit Status

Component Status Auditor
transaction Audited Verichains

Supported Versions

Version Status
1.7.x Supported
< 1.7 Not supported

Reporting a Vulnerability

DO NOT open a public GitHub issue for security vulnerabilities.

Report vulnerabilities through GitHub Security Advisories.

Include:

  • Description of the vulnerability
  • Affected version(s)
  • Steps to reproduce
  • Potential impact
  • Suggested fix (if any)

Response Timeline

Action Timeframe
Initial response 48 hours
Vulnerability assessment 7 days
Patch development 14-30 days
Public disclosure After patch

Security Scope

In Scope

  • Transaction parsing and validation
  • Cryptographic operations (signatures, hashing)
  • Address handling and derivation
  • Network communication protocols
  • UTXO management
  • Script parsing and execution

Out of Scope

  • Third-party dependencies (report to respective maintainers)
  • User application logic errors
  • Issues in development/test environments only

Contact

There aren’t any published security advisories