To report a security vulnerability, open this repository's Security tab, choose Advisories, then select Report a vulnerability. GitHub sends the report privately to the repository's maintainers. Do not post credentials, exploitable details, wallet data or user data in a public issue or pull request.

Include the affected revision, a minimal reproduction with disposable data, and the expected impact. Maintainers will coordinate validation and disclosure. This repository is not a place to submit bitcoin signing or recovery material.