If you think you have discovered a security issue in any of the Hyperledger projects, we'd love to hear from you. We will take all security bugs seriously and if confirmed upon investigation we will patch it within a reasonable amount of time and release a public security bulletin discussing the impact and credit the discoverer.

To report a security bug, please submit it via Hackerone.

The process by which the Hyperledger Security Team handles security bugs is documented further in our Defect Response page on our wiki.