Blockchain Security Contacts

This directory is a community-curated resource for contacting security teams. It identifies the best way to contact an organization's security team so that hackers can report vulnerabilities directly to the organizations that can resolve them.

This document is a work in progress. We're happy to accept feedback, questions, or ideas for improvements. File an issue or join us on Slack to talk further.

Recommendations

• Refer to disclose.io for vulnerability disclosure program best practices
• Don't make researchers agree to terms to report security issues to you
• Create a security@ email address that delivers directly to your engineering team

Blockchains

Name	Contact	More info
Arweave	team@arweave.org
Bitcoin	security@bitcoincore.org	Security page
Bitcoin Cash
Bitcoin Gold	admin@bitcoingold.org	Disclosure policy
Bitshares	contactbitshares@bitshares.org
Bytecoin	contact@bytecoin.org
Cloakcoin	anorak@cloakcoin.com
Dash		Bug bounty
Decred	contact@decred.org
DogeCoin
Edgeware	security@commonwealth.im
EOS		Bug bounty
Ethereum	bounty@ethereum.org	Bug bounty
Ethereum Classic	security@etcdevteam.com
Horizen	security@horizen.global	Bug bounty
Hush	hushteam@protonmail.com	Security Page
ICON	hello@icon.foundation
IOV	security@iov.one
Komodo	security@komodoplatform.com
Litecoin	contact@litecoin.org
Nem	contact@nem.io
Neo	contact@neo.org
Monero	Multiple	Bug bounty
Ontology	contact@ont.io
POA Core	security@poanetwork.com	Security page
Ripple	bugs@ripple.com	Bug bounty
RSK	security@rsk.co	Bug bounty
Sia	hello@sia.tech
Steem
Tezos	security@tezos.com	Bug bounty
Qtum
Quorum	quorum_info@jpmorgan.com
VeChain
xDai Chain	security@poanetwork.com	Security page
ZCash	security@z.cash	Security page

Decentralized Applications

Name	Deployed Addresses	Contact	More info
0x	External Reference	team@0xproject.com	Bug bounty
1Hive		Keybase Chat	Bug bounty
AAVE		security@aave.com
Ampleforth	External Reference	dev-support@ampleforth.org
Aragon	External Reference	security@aragon.org	Bug bounty
Bamboo Relay		dex@bamboorelay.com
Bancor Network		security@bancor.network
BarterDEX Network		security@komodoplatform.com
Bloom	External Reference	team@bloom.co
bZx		security@bzx.network
C-Layer	External Reference	security@c-layer.org
Commonwealth.im		security@commonwealth.im
Compound Finance		security@compound.finance
Connext		support@connext.network
Decentraland			Bug bounty
Decentralized Vulnerability Platform		service@dvpnet.io
Democracy Earth		hello@democracy.earth
Dharma		security@dharma.io
Erasure / Numerai	External Reference	security@numer.ai
Ethfinex		bounty@ethfinex.com
Giveth	External Reference
Idle Finance	External Reference	security@idle.finance
InstaDApp	External Reference	info@instadapp.io
Kleros	External Reference	contact@kleros.io	Bug bounty
Kyber Network		hello@kyber.network
LivePeer	External Reference	security@livepeer.org
Melon		security@melonport.com
Nahmii		security@hubii.com
Nexus Mutual		security@nexusmutual.io
Raiden Network		bounty@raiden.network
Reimagined Finance		security@reimagined.fi	Disclosure Policy
RenEx		security@republicprotocol.com
Sablier	External Reference	hello@sablier.finance
Sandclock		security@sandclock.org
Set Protocol		security@setprotocol.com	Bug bounty
Solidified		info@solidified.io
Sovryn	External Reference		Bug bounty
Status.im		security@status.im	Bug bounty

Decentralized Exchanges (DEXs)

Name	Deployed Addresses	Contact	More info
AirSwap	Etherscan	bounty@airswap.io
DDEX	Etherscan	security@ddex.io
Enclaves		contact@enclaves.io
Leverj	Custodian	info@leverj.io	leverj.io
Orderbook	Etherscan	security@orderbook.io	Instruction
Synthetix		security@synthetix.io
UniSwap		contact@uniswap.io

ERC20 Tokens

Name	Ticker	Mainnet Address	Contact	More info
Aelf	ELF	Etherscan	contact@aelf.io
Aeternity	AE	Etherscan	info@aeternity.com
Aion	AION	Etherscan	hello@aion.network
AirSwap	AST	Etherscan	bounty@airswap.io	Bug bounty
Ampleforth	AMPL	Etherscan	dev-support@ampleforth.org
Aragon	ANT	Etherscan	security@aragon.org	Bug bounty
Augur	REP	Etherscan	bounty@augur.net	Bug bounty
Aurora	AOA	Etherscan	info@aurorachain.io
Bancor	BNT	Etherscan	contact@bancor.network
Banker Token	BNK	Etherscan	technical@bankera.com
Basic Attention Token	BAT		security@brave.com	Bug bounty
Bibox Token	BIX	Etherscan
Binance Coin	BNB	Etherscan	security@binance.com	Bug Bounty
Bloom	BLT	Etherscan	team@bloom.co
Brickblock	BBK	Etherscan	security@brickblock.io
Bytom	BTM	Etherscan	contact@bytom.io
ChainLink	LINK	Etherscan	security@chain.link
CyberMiles	CMT	Etherscan	contact@cybermiles.io
Dai	DAI	Etherscan	infosec@makerdao.com
Decentraland	MANA	Etherscan	hello@decentraland.org
DentaCoin	DCN	Etherscan	founder@dentacoin.com
DigixDAO	DGD
Dropil	DROP	Etherscan	support@dropil.com
EToken Assets		List of Assets	security@ambisafe.com	Many tokens are issued with EToken
Dynamic Trading Rights	DTR	Etherscan	security@tokens.net
FEE Token	FEE	Etherscan	info@leverj.io
FunFair	FUN	Etherscan	info@funfair.io
Gnosis	GNO	Etherscan	info@gnosis.pm
Golem	GNT	Etherscan	contact@golem.network
Holo	HOT	Etherscan	info@holo.host
Hubiits	HBT	Etherscan	security@hubii.com
IOST	IOST	Etherscan	team@iost.io
Jigstack	STAK	Etherscan	hello@jigstack.org
Kin	KIN	Etherscan
KuCoin Shares	KCS	Etherscan	support@kucoin.com
Kyber Network	KNC	Etherscan	hello@kyber.network
Ledgerium	LGUM	Etherscan	security@ledgerium.net
Leverj	LEV	Etherscan	info@leverj.io
Loopring	LRC	Etherscan	bounty@loopring.org	Bug bounty
Loom Network	LOOM	Etherscan	security@loomx.io
Mainframe	MFT	Etherscan	security@mainframe.com
Maker	MKR	Etherscan
Melon Token	MLN		security@melonport.com	Bug bounty
Monaco	MCO	Etherscan	contact@mco.crypto.com
Mithril	MITH	Etherscan
Mixin	XIN	Etherscan	contact@mixin.one
MUI Token	MUI	Etherscan	wallet@sovereignwallet.network
Nahmii	NII	Etherscan	security@hubii.com
Nectar	NEC	Etherscan	bounty@ethfinex.com
NuCypher	NU		security@nucypher.com
Nuls	NULS	Etherscan	hi@nuls.io
Numeraire	NMR	Etherscan	security@numer.ai
ODEM	ODEM	Etherscan	info@odem.io
OmiseGO	OMG	Etherscan
Orderbook BTC	OBTC	Etherscan	security@orderbook.io	Instructions
Orderbook USD	OUSD	Etherscan	security@orderbook.io	Instructions
Paypex	PAYX	Etherscan	contact@paypex.org
POA20 Bridge	POA20	Etherscan	security@poanetwork.com	Security page
PolySwarm	NCT	Etherscan	security@polyswarm.io	Security page
Polymath	POLY	Etherscan	support@polymath.zendesk.com	Bug bounty
Populous	PPT	Etherscan	info@populous.co
Power Ledger	POWR	Etherscan	support@powerledger.io
Pundi X	NPXS	Etherscan	contact@pundix.com
QASH	QASH	Etherscan
Quantstamp	QSP	Etherscan	security@quantstamp.com	Bug bounty
RChain	RHOC	Etherscan
Ren	REN	Etherscan
Sai	SAI	Etherscan
Salt	SALT	Etherscan	salt_security@saltlending.com
SelfKey	KEY	Etherscan	help@selfkey.org
SpankChain	SPANK	Etherscan	security@spankchain.com
Synthetix	SNX	Proxy Underlying	security@synthetix.io
Synths (all flavors)	sUSD, sETH, etc	Proxy sUSD	security@synthetix.io
Status	SNT	Etherscan	security@status.im
Storj	STORJ	Etherscan	hello@storj.io
Tellor	TRB	Etherscan	info@tellor.io
TenX	PAY	Etherscan	team@tenx.tech
Tether	USDT	Etherscan	security@tether.to , security@bitfinex.com
TrueUSD	TUSD	Etherscan	hello@trusttoken.com
USDCoin	USDC	Etherscan	usdc-security@circle.com
Veritaseum	VERI	Etherscan
Waltonchain	WTC	Etherscan	info@waltonchain.org
WAX	WAX	Etherscan	support@wax.io
Zilliqa	ZIL	Etherscan	security@zilliqa.com

ERC721 Tokens

Name	Mainnet Address	Contact	More Info
CryptoKitties (CK)	Etherscan
Gods Unchained (GODS)	Etherscan

Exchanges

Name	Contact	More Info
A1 Exchange	contact@a1.exchange
BCEX	business@bcex.top, service@bcex.top
Bankera Exchange	technical@bankera.com
Bibox	support@bibox.zendesk.com
Binance	security@binance.com	Bug Bounty
Bitaccess	security@bitaccess.ca	Bug bounty
Bittrex	security-reports@bittrex.com
Bit-Z	safe@bit-z.pro
Bitfinex	security@bitfinex.com
bitFlyer	security@bitflyer.com
Bitforex	support@bitforex.com, report@bitforex.com
Bitso	security@bitso.com
Bitstamp	security@bitstamp.net
BitMEX	support@bitmex.com	Security page
Blockchain	security@blockchain.com	Bug bounty
Coinbase		Bug bounty
Coinbene	support@coinbene.com
Coinbit	cs@coinbit.co.kr
CoinExchange	support@coinexchange.io
Coinfinity	security@coinfinity.co (PGP)	Security page
Coinify	security@coinify.com
Coinsquare	security@coinsquare.com
Coinsuper	customer.support@coinsuper.com
CoinSwitch	security@coinswitch.co
CryptoFacilities	contact@cryptofacilities.com
Digifinex	support@digifinex.com
DOBI	service@dobitrade.com
Ethfinex	security@ethfinex.com
Exmo	admin@exmo.com
EXX	support@exx.com
Faa.st	security@faa.st	Bug bounty
Gemini Trust	security@gemini.com	Security page
HitBTC	relations@hitbtc.com, legal@hitbtc.com
Huobi Global	sec@huobi.com	Security page
ICONOMI	security@iconomi.com
IDAX	service@idax.mn
Kraken	bugbounty@kraken.com	Bug Bounty
Leverj	info@leverj.io	leverj.io
OKEx	support@okex.com, lawenforcement@okex.com
Orderbook	security@orderbook.io	Instructions
Poloniex	poloniex-security@circle.com
qTrade.io	security@qtrade.io
QuadrigaCX	security@quadrigacx.com
SFOX	security@sfox.com	Bug Bounty
ShapeShift	security@shapeshift.io	Disclosure Program
SpectroCoin	technical@spectrocoin.com	Bug bounty
Trade.io	security@trade.io
Tokens	security@tokens.net	Security page
ZBG	sp@zbg.com

Infrastructure

Name	Contact	More Info
Ambisafe SaaS	security@ambisafe.com
Etherscan
GasTracker	splix@gastracker.io
Infura	security@infura.io
PegaSys	security@pegasys.tech	For Pantheon, Orion, and Artemis: Ethereum 1.0/2.0/EEA clients
SafeBlocks Firewall	support@safeblocks.io
Upvest	security@upvest.co
QuikNode	info@quiknode.io
Vyper	security@vyperlang.org	Security Policy

Wallets

Name	Contact	More info
Ambisafe CryptoWallet	security@ambisafe.com
Arkane	info@arkane.network
Blockchain	security@blockchain.com	Bug bounty
BitGo	secteam@bitgo.com
Emerald Wallet	security@etcdevteam.com
Groundhog	security@groundhog.network
KeepKey	security@shapeshift.io	Disclosure Program
Ledger	security@ledger.fr	Bug bounty
MetaMask	security@metamask.io	Bug bounty
MyCrypto	security@mycrypto.com	Disclosure Program
MyEtherWallet	security@myetherwallet.com	Bug bounty
Parity	bugbounty@parity.io	Bug bounty
SelfKey	help@selfkey.org
SovereignWallet	wallet@sovereignwallet.network
Trustwallet	support@trustwalletapp.com
Unchained Capital	secure@unchained-capital.com	Bug Bounty
Upvest	security@upvest.co