To report a potential security issue, please email us at bitkey-security@block.xyz. A member of the Bitkey team will respond within 7 calendar days of receiving your report.
To help us protect our customers, we ask that you:
- Report vulnerabilities to us as soon as possible
- Coordinate disclosure with us, so we can investigate and address the issue before it's shared publicly
- Avoid sharing details with anyone outside the Bitkey team until the issue is resolved
We follow a 90-day disclosure policy, which means:
- Please do not disclose the existence, discovery, or technical details of the vulnerability until 90 days after you've reported it to us with reasonable technical detail
- Notify us prior to any public disclosure
Thank you for helping us keep Bitkey secure.