# Lunaria — security contact (RFC 9116)
# Stealth-address payment infrastructure on LitVM LiteForge testnet.

Contact: mailto:info@lunariaprotocol.com
Expires: 2027-07-28T00:00:00.000Z
Preferred-Languages: en, pt
Canonical: https://lunariaprotocol.com/.well-known/security.txt

# Scope
#   Announcer  0x55649E01B5Df198D18D95b5cc5051630cfD45564  (canonical, Trail of Bits audited)
#   Registry   0x6538E6bf4B0eBd30A8Ea093027Ac2422ce5d6538  (canonical, Trail of Bits audited)
#   Router     0xbEa56424D71f88eEe33eA6539cF6ee76498D67E7  (custom, UNAUDITED, testnet only)
#   App        https://app.lunariaprotocol.com
#   Indexer    https://indexer.lunariaprotocol.com
#
# Out of scope: the LitVM chain, Caldera RPC/explorer, testnet faucets, third-party
# wallets, and denial of service against public testnet endpoints.
#
# Most interested in: key derivation or shared-secret flaws that let a third party
# detect or spend a stealth payment; router fee/net accounting errors or retained
# funds; anything that links indexer announcements to a specific recipient.
#
# Please do not include working exploit details in first contact — send a short
# description and we will arrange a private channel. There is no bug bounty.
#
# This is testnet software and is not audited for mainnet use.