We're extremely grateful for security researchers and users that report vulnerabilities. All reports are thoroughly investigated.

Please do not file a public ticket mentioning any vulnerability.

All suspected vulnerabilities should be privately and responsibly disclosed.

To report a vulnerability in TuCOP Wallet, please open a private security advisory on GitHub or email the team directly.

TuCOP Wallet is built on the Celo network. For vulnerabilities related to the Celo protocol itself (not specific to TuCOP), you can also report to:

• Celo on HackerOne
• security@celo.org
• Celo Security Announcements