MarketX is an escrow smart contract. Please report suspected vulnerabilities privately so maintainers can investigate and ship fixes before details are public.
| Version | Supported |
|---|---|
Current main branch |
✅ |
| Tagged production releases | ✅ |
| Older unmaintained branches or forks | ❌ |
Use GitHub's private vulnerability reporting for this repository:
- Open the repository on GitHub.
- Select Security.
- Select Report a vulnerability.
- Include the affected contract area, reproduction steps, impact, and any proof-of-concept details.
If the GitHub security report flow is unavailable, open a minimal public issue that asks maintainers to enable private reporting. Do not include exploit details in that public issue.
Maintainers aim to acknowledge private reports within 3 business days and provide an initial triage update within 7 business days. Resolution timelines depend on severity, exploitability, and whether a coordinated release is required.
Please do not publicly disclose vulnerability details until maintainers have confirmed a fix or coordinated a disclosure timeline with you.