If you discover a vulnerability in RobiNode, please report it privately.

• Open a private security advisory on github.com/rnode-dev/robinode, or
• Contact the maintainers via the project channels listed at robinode.xyz

Do not open a public issue for undisclosed vulnerabilities. Do not include private keys, seed phrases, or production credentials in any report.

See docs/SECURITY_KEYS.md for the generic key-role posture (placeholders only).

A committed Slither static-analysis snapshot lives at docs/audit/slither-report.md. It is not a formal audit.