We take security very seriously. Send an email to firstname.lastname@example.org, and we'll get back to you ASAP. Bounties will be paid in LBC for valid security reports based on information provided and severity.
Our GPG key is here. You can encrypt a message to us using this web form.