To report potential security issues to us, please email us at bitkey-security@block.xyz. A member of the Bitkey team will contact you within 7 calendar days of your report.
To protect our customers, we ask that you report vulnerabilities to us as soon as you can, and that you coordinate disclosure with us first, so that we can understand and mitigate reported vulnerabilities before they are disclosed to anyone other than the Bitkey team or to the public. To accomplish this, we ask you to follow a 90-day disclosure policy. That is, we ask that you do not disclose the existence, discovery, and technical details of the vulnerability until the 90th day after you file a report with reasonable technical detail with the Bitkey team, and that you notify us prior to disclosure.
Thank you for helping us secure Bitkey.