pyth-crosschain/SECURITY.md

# Security

## Bug Bounty Program (*work in progress*)

We are in the process of designing a **bug bounty program** for Pyth.

In the mean-time, if you find a security issue in Pyth, we ask that you reach out to our team via **[Discord](https://discord.com/invite/pythnetwork)**.

## 3rd Party Security Audits

We engage 3rd party firms to conduct independent security audits of Pyth.  At any given time, we likely have multiple audit streams in progress.

As these 3rd party audits are completed and issues are sufficiently addressed, we make those audit reports public.

- **[April 27, 2022 - Zellic](https://github.com/pyth-network/audit-reports/blob/main/2022_04_27/pyth2wormhole_zellic.pdf)**
    - **Scope**: *pyth-crosschain (formerly known as pyth2wormhole))*
Add SECURITY.md (#206) 2022-05-16 00:22:55 -07:00			`# Security`

Add bug bounty and audits (#233) 2022-07-12 15:02:47 -07:00			`## Bug Bounty Program (work in progress)`

			`We are in the process of designing a bug bounty program for Pyth.`

			`In the mean-time, if you find a security issue in Pyth, we ask that you reach out to our team via [Discord](https://discord.com/invite/pythnetwork).`

			`## 3rd Party Security Audits`

			`We engage 3rd party firms to conduct independent security audits of Pyth. At any given time, we likely have multiple audit streams in progress.`

			`As these 3rd party audits are completed and issues are sufficiently addressed, we make those audit reports public.`

			`- [April 27, 2022 - Zellic](https://github.com/pyth-network/audit-reports/blob/main/2022_04_27/pyth2wormhole_zellic.pdf)`
			`- Scope: pyth-crosschain (formerly known as pyth2wormhole))`