Security is fundamental to Breez. If you discover a vulnerability, we encourage you to report it responsibly.

Please report security issues privately to contact@breez.technology. Do not file a public issue or pull request.

When reporting a vulnerability, please include, if available:

• Affected version or commit, and the app version or build number
• Platform and OS version (iOS or Android)
• Whether the issue is in the native shell, a Capacitor plugin, or the embedded web app
• Description of the vulnerability and its potential impact
• Steps to reproduce or a proof of concept

Glow's web layer lives in breez/glow-web and its wallet functionality in the Breez SDK. Report issues in either to the same address rather than filing publicly.

We will acknowledge your report and keep you informed as we investigate and address the issue.