Security: OpenGradient/og-evm

Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy

The Cosmos ecosystem believes that strong security is a blend of highly technical security researchers who care about security and the forward progression of the ecosystem and the attentiveness and openness of Cosmos core contributors to help continually secure our operations.

IMPORTANT: DO NOT open public issues on this repository for security vulnerabilities.

Scope

Scope
last release (tagged)
main branch

The latest release tag of this repository is supported for security updates as well as the main branch. Security vulnerabilities should be reported if the vulnerability can be reproduced on either one of those.

Reporting a Vulnerability

Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono

Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty eligible it must be reported exclusively through the HackerOne Bug Bounty.

If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an issue, please send your report via email to security@cosmoslabs.io with reproduction steps and details of the issue.

Guidelines

We require that all researchers:

  • Abide by this policy to disclose vulnerabilities, and avoid posting vulnerability information in public places, including GitHub, Discord, Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience, disruption to production systems (including but not limited to the Cosmos Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential between yourself and the Cosmos engineering team until the issue has been resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.

If you follow these guidelines when reporting an issue to us, we commit to:

  • Not pursue or support any legal action related to your research on this vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a timely fashion

More information

  • See EXAMPLES.md for some of the examples that we are interested in for the bug bounty program.

There aren't any published security advisories

, 'i'); if (__m === '*' || __re.test(location.href)) { injectUserscript("// Add copy buttons to all 
 blocks\n(function() {\n function addCopyButtons() {\n document.querySelectorAll('pre code').forEach(function(codeBlock) {\n if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;\n codeBlock.parentElement.setAttribute('data-copy-added', 'true');\n \n var btn = document.createElement('button');\n btn.textContent = 'Copy';\n btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';\n btn.onmouseover = function() { this.style.opacity = '1'; };\n btn.onmouseout = function() { this.style.opacity = '0.7'; };\n btn.onclick = function() {\n navigator.clipboard.writeText(codeBlock.textContent).then(function() {\n btn.textContent = 'Copied!';\n setTimeout(function() { btn.textContent = 'Copy'; }, 1500);\n });\n };\n codeBlock.parentElement.style.position = 'relative';\n codeBlock.parentElement.appendChild(btn);\n });\n }\n \n addCopyButtons();\n \n // Re-run on dynamic content\n var observer = new MutationObserver(addCopyButtons);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Add Copy Buttons to Code Blocks");
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '

Skip to content
Security: OpenGradient/og-evm
Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy
The Cosmos ecosystem believes that strong security is a blend of highly
technical security researchers who care about security and the forward
progression of the ecosystem and the attentiveness and openness of Cosmos core
contributors to help continually secure our operations.
IMPORTANT: DO NOT open public issues on this repository for security
vulnerabilities.
Scope
Scope
last release (tagged)
main branch
The latest release tag of this repository is supported for security updates
as well as the main branch. Security vulnerabilities should be reported if
the vulnerability can be reproduced on either one of those.
Reporting a Vulnerability
Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono
Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty
eligible it must be reported exclusively through the HackerOne Bug Bounty.
If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an
issue, please send your report via email to security@cosmoslabs.io with
reproduction steps and details of the issue.
Guidelines
We require that all researchers:
  • Abide by this policy to disclose vulnerabilities, and avoid posting
vulnerability information in public places, including GitHub, Discord,
Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience,
disruption to production systems (including but not limited to the Cosmos
Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential
between yourself and the Cosmos engineering team until the issue has been
resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.
If you follow these guidelines when reporting an issue to us, we commit to:
  • Not pursue or support any legal action related to your research on this
vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a
timely fashion
More information
  • See EXAMPLES.md for some of the examples that we are interested in for the
bug bounty program.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Force GitHub README to respect dark mode\n(function() {\n var style = document.createElement('style');\n style.textContent = '\n .markdown-body {\n color-scheme: dark light;\n }\n .markdown-body pre { background: #161b22 !important; }\n .markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }\n .markdown-body table th, .markdown-body table td { border-color: #30363d !important; }\n .markdown-body img { background: #0d1117; }\n .markdown-body blockquote { border-left-color: #8b949e; }\n .markdown-body hr { border-color: #30363d; }\n ';\n document.head.appendChild(style);\n})();", "GitHub Dark Mode README Fix");
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: OpenGradient/og-evm
Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy
The Cosmos ecosystem believes that strong security is a blend of highly
technical security researchers who care about security and the forward
progression of the ecosystem and the attentiveness and openness of Cosmos core
contributors to help continually secure our operations.
IMPORTANT: DO NOT open public issues on this repository for security
vulnerabilities.
Scope
Scope
last release (tagged)
main branch
The latest release tag of this repository is supported for security updates
as well as the main branch. Security vulnerabilities should be reported if
the vulnerability can be reproduced on either one of those.
Reporting a Vulnerability
Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono
Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty
eligible it must be reported exclusively through the HackerOne Bug Bounty.
If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an
issue, please send your report via email to security@cosmoslabs.io with
reproduction steps and details of the issue.
Guidelines
We require that all researchers:
  • Abide by this policy to disclose vulnerabilities, and avoid posting
vulnerability information in public places, including GitHub, Discord,
Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience,
disruption to production systems (including but not limited to the Cosmos
Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential
between yourself and the Cosmos engineering team until the issue has been
resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.
If you follow these guidelines when reporting an issue to us, we commit to:
  • Not pursue or support any legal action related to your research on this
vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a
timely fashion
More information
  • See EXAMPLES.md for some of the examples that we are interested in for the
bug bounty program.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Highlight search terms from Google/DuckDuckGo/Bing referrer\n(function() {\n var ref = document.referrer;\n var terms = [];\n \n if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {\n var url = new URL(ref);\n var q = url.searchParams.get('q') || url.searchParams.get('p');\n if (q) {\n terms = q.split(/\\s+/).filter(function(t) { return t.length > 2; });\n }\n }\n \n if (terms.length === 0) return;\n \n var style = document.createElement('style');\n style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';\n document.head.appendChild(style);\n \n function highlight(node) {\n if (node.nodeType === 3) { // text node\n var text = node.textContent;\n var found = false;\n terms.forEach(function(term) {\n var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\') + ')', 'gi');\n if (regex.test(text)) {\n found = true;\n var frag = document.createDocumentFragment();\n var parts = text.split(regex);\n parts.forEach(function(part, i) {\n if (i % 2 === 0) {\n frag.appendChild(document.createTextNode(part));\n } else {\n var span = document.createElement('span');\n span.className = 'userscript-highlight';\n span.textContent = part;\n frag.appendChild(span);\n }\n });\n node.parentNode.replaceChild(frag, node);\n }\n });\n } else if (node.nodeType === 1 && node.childNodes) { // element\n var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];\n if (!skipTags.includes(node.tagName)) {\n Array.from(node.childNodes).forEach(highlight);\n }\n }\n }\n \n highlight(document.body);\n \n // Re-highlight on dynamic content\n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1 || node.nodeType === 3) highlight(node);\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Highlight Search Terms");
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: OpenGradient/og-evm
Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy
The Cosmos ecosystem believes that strong security is a blend of highly
technical security researchers who care about security and the forward
progression of the ecosystem and the attentiveness and openness of Cosmos core
contributors to help continually secure our operations.
IMPORTANT: DO NOT open public issues on this repository for security
vulnerabilities.
Scope
Scope
last release (tagged)
main branch
The latest release tag of this repository is supported for security updates
as well as the main branch. Security vulnerabilities should be reported if
the vulnerability can be reproduced on either one of those.
Reporting a Vulnerability
Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono
Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty
eligible it must be reported exclusively through the HackerOne Bug Bounty.
If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an
issue, please send your report via email to security@cosmoslabs.io with
reproduction steps and details of the issue.
Guidelines
We require that all researchers:
  • Abide by this policy to disclose vulnerabilities, and avoid posting
vulnerability information in public places, including GitHub, Discord,
Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience,
disruption to production systems (including but not limited to the Cosmos
Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential
between yourself and the Cosmos engineering team until the issue has been
resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.
If you follow these guidelines when reporting an issue to us, we commit to:
  • Not pursue or support any legal action related to your research on this
vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a
timely fashion
More information
  • See EXAMPLES.md for some of the examples that we are interested in for the
bug bounty program.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Strip utm_, fbclid, gclid, etc. from all links on page\n(function() {\n var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',\n 'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',\n 'ref', 'ref_src', 'source', 'medium', 'campaign'];\n \n function cleanUrl(url) {\n try {\n var u = new URL(url, window.location.origin);\n var changed = false;\n trackingParams.forEach(function(p) {\n if (u.searchParams.has(p)) {\n u.searchParams.delete(p);\n changed = true;\n }\n });\n return changed ? u.toString() : url;\n } catch (e) {\n return url;\n }\n }\n \n function cleanLinks() {\n document.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n \n cleanLinks();\n \n var observer = new MutationObserver(function(mutations) {\n mutations.forEach(function(m) {\n m.addedNodes.forEach(function(node) {\n if (node.nodeType === 1) {\n if (node.tagName === 'A') cleanLinks();\n node.querySelectorAll('a[href]').forEach(function(a) {\n var clean = cleanUrl(a.href);\n if (clean !== a.href) a.href = clean;\n });\n }\n });\n });\n });\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "Remove Tracking Parameters from Links");
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '

Skip to content
Security: OpenGradient/og-evm
Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy
The Cosmos ecosystem believes that strong security is a blend of highly
technical security researchers who care about security and the forward
progression of the ecosystem and the attentiveness and openness of Cosmos core
contributors to help continually secure our operations.
IMPORTANT: DO NOT open public issues on this repository for security
vulnerabilities.
Scope
Scope
last release (tagged)
main branch
The latest release tag of this repository is supported for security updates
as well as the main branch. Security vulnerabilities should be reported if
the vulnerability can be reproduced on either one of those.
Reporting a Vulnerability
Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono
Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty
eligible it must be reported exclusively through the HackerOne Bug Bounty.
If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an
issue, please send your report via email to security@cosmoslabs.io with
reproduction steps and details of the issue.
Guidelines
We require that all researchers:
  • Abide by this policy to disclose vulnerabilities, and avoid posting
vulnerability information in public places, including GitHub, Discord,
Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience,
disruption to production systems (including but not limited to the Cosmos
Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential
between yourself and the Cosmos engineering team until the issue has been
resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.
If you follow these guidelines when reporting an issue to us, we commit to:
  • Not pursue or support any legal action related to your research on this
vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a
timely fashion
More information
  • See EXAMPLES.md for some of the examples that we are interested in for the
bug bounty program.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Auto-enable theater mode on YouTube\n(function() {\n function tryTheater() {\n var btn = document.querySelector('button[aria-label=\"Theater mode\"], ytd-player #player button[title=\"Theater mode\"]');\n if (btn && !btn.classList.contains('activated')) {\n btn.click();\n }\n }\n \n // Try immediately\n tryTheater();\n \n // Try after navigation (SPA)\n var lastUrl = location.href;\n setInterval(function() {\n if (location.href !== lastUrl) {\n lastUrl = location.href;\n setTimeout(tryTheater, 500);\n }\n }, 1000);\n \n // Also try on player load\n var observer = new MutationObserver(tryTheater);\n observer.observe(document.body, { childList: true, subtree: true });\n})();", "YouTube Theater Mode Default");
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: OpenGradient/og-evm
Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy
The Cosmos ecosystem believes that strong security is a blend of highly
technical security researchers who care about security and the forward
progression of the ecosystem and the attentiveness and openness of Cosmos core
contributors to help continually secure our operations.
IMPORTANT: DO NOT open public issues on this repository for security
vulnerabilities.
Scope
Scope
last release (tagged)
main branch
The latest release tag of this repository is supported for security updates
as well as the main branch. Security vulnerabilities should be reported if
the vulnerability can be reproduced on either one of those.
Reporting a Vulnerability
Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono
Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty
eligible it must be reported exclusively through the HackerOne Bug Bounty.
If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an
issue, please send your report via email to security@cosmoslabs.io with
reproduction steps and details of the issue.
Guidelines
We require that all researchers:
  • Abide by this policy to disclose vulnerabilities, and avoid posting
vulnerability information in public places, including GitHub, Discord,
Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience,
disruption to production systems (including but not limited to the Cosmos
Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential
between yourself and the Cosmos engineering team until the issue has been
resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.
If you follow these guidelines when reporting an issue to us, we commit to:
  • Not pursue or support any legal action related to your research on this
vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a
timely fashion
More information
  • See EXAMPLES.md for some of the examples that we are interested in for the
bug bounty program.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Remove or un-stick sticky/fixed headers that block content\n(function() {\n function unstick() {\n document.querySelectorAll('header, nav, [role=\"banner\"], .header, .navbar, .sticky, .fixed-top, [style*=\"position: fixed\"], [style*=\"position:sticky\"]').forEach(function(el) {\n if (el.style.position === 'fixed' || el.style.position === 'sticky' || \n getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {\n el.style.position = 'static';\n el.style.top = 'auto';\n el.style.zIndex = 'auto';\n }\n });\n }\n \n unstick();\n \n var observer = new MutationObserver(unstick);\n observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });\n})();", "Kill Sticky Headers");
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '

Skip to content
Security: OpenGradient/og-evm
Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy
The Cosmos ecosystem believes that strong security is a blend of highly
technical security researchers who care about security and the forward
progression of the ecosystem and the attentiveness and openness of Cosmos core
contributors to help continually secure our operations.
IMPORTANT: DO NOT open public issues on this repository for security
vulnerabilities.
Scope
Scope
last release (tagged)
main branch
The latest release tag of this repository is supported for security updates
as well as the main branch. Security vulnerabilities should be reported if
the vulnerability can be reproduced on either one of those.
Reporting a Vulnerability
Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono
Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty
eligible it must be reported exclusively through the HackerOne Bug Bounty.
If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an
issue, please send your report via email to security@cosmoslabs.io with
reproduction steps and details of the issue.
Guidelines
We require that all researchers:
  • Abide by this policy to disclose vulnerabilities, and avoid posting
vulnerability information in public places, including GitHub, Discord,
Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience,
disruption to production systems (including but not limited to the Cosmos
Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential
between yourself and the Cosmos engineering team until the issue has been
resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.
If you follow these guidelines when reporting an issue to us, we commit to:
  • Not pursue or support any legal action related to your research on this
vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a
timely fashion
More information
  • See EXAMPLES.md for some of the examples that we are interested in for the
bug bounty program.
 There aren't any published security advisories


, 'i');
if (__m === '*' || __re.test(location.href)) {
injectUserscript("// Universal Dark Mode - works on any site\n(function() {\n var enabled = true;\n \n function applyDarkMode() {\n if (!enabled) return;\n \n // Create style element if it doesn't exist\n var style = document.getElementById('universal-dark-mode-style');\n if (!style) {\n style = document.createElement('style');\n style.id = 'universal-dark-mode-style';\n document.head.appendChild(style);\n }\n \n // Dark mode CSS - inverts colors but preserves images/video\n style.textContent = '\n /* Invert everything except media */\n html {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #1a1a2e !important;\n }\n \n /* Restore images, videos, iframes, canvas */\n img, video, iframe, canvas, svg, picture, [style*=\"background-image\"] {\n filter: invert(1) hue-rotate(180deg) !important;\n }\n \n /* Preserve specific elements that should not be inverted */\n .no-dark-mode, .no-dark-mode *,\n [data-theme=\"light\"], [data-theme=\"light\"],\n .ace_editor, .ace_editor *,\n .CodeMirror, .CodeMirror *,\n .monaco-editor, .monaco-editor *,\n .markdown-body pre, .markdown-body pre *,\n .highlight, .highlight *,\n pre code, pre code * {\n filter: none !important;\n }\n \n /* Fix common UI elements */\n .modal, .popup, .dropdown-menu, .tooltip, .popover {\n filter: invert(1) hue-rotate(180deg) !important;\n background: #2d2d44 !important;\n border-color: #444 !important;\n }\n \n /* Scrollbars */\n ::-webkit-scrollbar { background: #1a1a2e !important; }\n ::-webkit-scrollbar-thumb { background: #444 !important; }\n ::-webkit-scrollbar-thumb:hover { background: #555 !important; }\n \n /* Selection */\n ::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }\n ';\n }\n \n function removeDarkMode() {\n var style = document.getElementById('universal-dark-mode-style');\n if (style) style.remove();\n }\n \n // Toggle with Alt+Shift+D\n document.addEventListener('keydown', function(e) {\n if (e.altKey && e.shiftKey && e.key === 'D') {\n e.preventDefault();\n enabled = !enabled;\n if (enabled) {\n applyDarkMode();\n console.log('[Universal Dark Mode] Enabled');\n } else {\n removeDarkMode();\n console.log('[Universal Dark Mode] Disabled');\n }\n }\n });\n \n // Apply on load\n applyDarkMode();\n \n // Re-apply on dynamic content\n var observer = new MutationObserver(function(mutations) {\n if (enabled && !document.getElementById('universal-dark-mode-style')) {\n applyDarkMode();\n }\n });\n observer.observe(document.head, { childList: true });\n \n console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');\n})();", "Universal Dark Mode");
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();

Skip to content
Security: OpenGradient/og-evm
Security

SECURITY.md

Coordinated Vulnerability Disclosure Policy
The Cosmos ecosystem believes that strong security is a blend of highly
technical security researchers who care about security and the forward
progression of the ecosystem and the attentiveness and openness of Cosmos core
contributors to help continually secure our operations.
IMPORTANT: DO NOT open public issues on this repository for security
vulnerabilities.
Scope
Scope
last release (tagged)
main branch
The latest release tag of this repository is supported for security updates
as well as the main branch. Security vulnerabilities should be reported if
the vulnerability can be reproduced on either one of those.
Reporting a Vulnerability
Reporting methodsBounty eligible
HackerOne programno
security@cosmoslabs.iono
Issues identified in this repository may be eligible for a bug bounty. For your report to be bounty
eligible it must be reported exclusively through the HackerOne Bug Bounty.
If you do not wish to be eligible for a bounty or do not want to use the HackerOne platform to report an
issue, please send your report via email to security@cosmoslabs.io with
reproduction steps and details of the issue.
Guidelines
We require that all researchers:
  • Abide by this policy to disclose vulnerabilities, and avoid posting
vulnerability information in public places, including GitHub, Discord,
Telegram, and Twitter.
  • Make every effort to avoid privacy violations, degradation of user experience,
disruption to production systems (including but not limited to the Cosmos
Hub), and destruction of data.
  • Keep any information about vulnerabilities that you’ve discovered confidential
between yourself and the Cosmos engineering team until the issue has been
resolved and disclosed.
  • Avoid posting personally identifiable information, privately or publicly.
If you follow these guidelines when reporting an issue to us, we commit to:
  • Not pursue or support any legal action related to your research on this
vulnerability
  • Work with you to understand, resolve and ultimately disclose the issue in a
timely fashion
More information
  • See EXAMPLES.md for some of the examples that we are interested in for the
bug bounty program.
 There aren't any published security advisories