Please report any vulnerability or any bug that could potentially affect the security of users' funds by mail to both of these addresses:
You may use our PGP public keys to encrypt your mail: Jean Do, odudex.
In the subject type [Krux firmware] Security Report: <short description>
and in the body a long description describing the issue. We aim to respond
within one week and patch within 90 days.