Currently supported versions for security updates:
| Version | Supported |
|---|---|
| 1.0.x | ✅ |
| < 1.0 | ❌ |
This software handles token creation and management on the Solana blockchain. Please be aware of the following security considerations:
-
Key Management
- Private keys are generated locally and stored in the
token_keysdirectory - Never share or commit your private keys
- Always backup your keys securely
- The
token_keysdirectory is git-ignored by default
- Private keys are generated locally and stored in the
-
Network Security
- The software interacts with Solana's network
- Always verify you're connecting to the correct network (mainnet/devnet)
- Check transaction details before signing
- Monitor your SOL balance for token operations
-
Local Security
- Keep your system and dependencies up to date
- Use secure and unique passwords for your Solana wallets
- Enable firewall and maintain updated antivirus software
- Be cautious when running scripts or commands from unknown sources
We take security vulnerabilities seriously. If you discover a security vulnerability within Token22 Vanity, please follow these steps:
- Do Not disclose the vulnerability publicly
- Do Not create a public GitHub issue
- Send a detailed report to security@texaglo.com including:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- Suggested fix (if any)
We will acknowledge receipt of your report within 48 hours and provide a detailed response within 72 hours, including:
- Confirmation of the vulnerability
- Our plans for addressing it
- Any potential workarounds
-
Before Running
- Verify the authenticity of the source code
- Review the code and dependencies
- Use a dedicated wallet for testing
- Start with small amounts on devnet
-
During Operation
- Monitor all transactions
- Keep your seed phrases secure
- Regularly check for updates
- Follow security announcements
-
After Usage
- Securely store or delete generated keys
- Clear cached data if necessary
- Monitor your wallet activity
- Security updates will be released as soon as possible
- Updates will be signed and verified
- Release notes will detail security-relevant changes
- Follow our GitHub repository for security announcements
For security-related inquiries, contact:
- Email: security@texaglo.com
- GitHub: Create a security advisory through the repository's Security tab
We appreciate the security research community's efforts in responsibly disclosing vulnerabilities. Security researchers who report valid vulnerabilities will be acknowledged (with permission) in our security advisories.