Please see https://github.com/zcash/zcash-android-wallet-sdk/blob/master/responsible_disclosure.md