# Security Reporting

Templar Protocol takes security seriously and encourages responsible disclosure of security vulnerabilities.

All smart contracts are open-source and use reproducible builds for maximum transparency.

## Bug Bounty

Templar has partnered with Immunefi to reward up to $100k for in-scope smart contract vulnerabilities.

To report smart contract vulnerabilities, please participate in [our Immunefi bug bounty](https://immunefi.com/bug-bounty/templar-protocol).

## Security Contact

For security vulnerabilities and sensitive issues, please email [security@templarprotocol.com](mailto:security@templarprotocol.com).

## Security Alerts

Important security notices will be posted on the official Discord server, Telegram channel, and X (Twitter) account.

## Audit Information

Audit reports are [available on GitHub](https://github.com/Templar-Protocol/contracts/tree/dev/audits).

## Responsible Disclosure

If you have discovered a security issue, please follow these steps:

1. **Report**: Send vulnerability details to [Immunefi bug bounty](https://immunefi.com/bug-bounty/templar-protocol) for smart contract vulnerabilities or [security@templarprotocol.com](mailto:security@templarprotocol.com) for other security issues.
2. **Investigation**: Security team will assess the report.
3. **Resolution**: Fix development and deployment.
4. **Public Disclosure**: Coordinated disclosure after fix.

Security reports should include:

- A clear description of the vulnerability.
- Steps to reproduce the issue.