Security issues and bugs should be reported privately via email. To report a security issue, please email security@btcpayserver.org (not for support).

You will receive a reply indicating the next steps in handling your report. If, for some reason, you do not receive a response within 24 hours, please follow up via email to ensure the original message was received.

After the initial reply to your report, you will be informed of the progress towards a fix and full announcement. You may be asked to provide additional information or guidance.

We appreciate your efforts to disclose your findings responsibly and will make every effort to acknowledge your contributions.