Report a security issue.
Responsible disclosure for the Synal gateway, website and SDKs.
How to report
Contact us privately through X DM · @synallabs. Do not post security details publicly. Include the affected endpoint or package, a reproducible description and the potential impact. We never ask for a seed phrase or private key. Remove secrets and other people’s data from evidence.
Scope
Gateway authentication, payment authorization and settlement handling, wallet Console access, website security and Synal SDKs are in scope.
Safe testing
Use your own wallet and authorized data. Do not spend another wallet’s funds, interrupt the service, extract user data or publish exploit details before coordinated remediation.
Coordination
We will work with you to assess and fix confirmed issues. No bounty or reward program is offered. We do not promise a response or resolution deadline.