Report a Vulnerability

Responsible Disclosure

We take the security of our platform and our users very seriously. If you believe you have discovered a security vulnerability in OneFlow, we encourage you to report it to us safely through our coordinated vulnerability disclosure program.

Guidelines

We ask that you:

• Do not exploit the vulnerability to view, delete, or alter data belonging to others.
• Do not publicly disclose the issue until we have had reasonable time to resolve it.
• Do not execute Denial of Service (DoS) attacks.
• Do not use automated scanners that generate excessive traffic.

Submission & Rewards

Please submit your findings to security@oneflows.xyz. Provide clear instructions to reproduce the issue. While we do not currently operate a public bug bounty program, we review all submissions and may offer swags or recognition in our hall of fame for critical disclosures.