RouteDock handles Stellar payments and the one-way-channel contract has not been audited. Please do not disclose vulnerabilities in public issues.

Use GitHub's Report a vulnerability button on the Security tab (private vulnerability reporting). Include affected commit, reproduction steps, impact, and whether funds or credentials may be at risk. We will acknowledge reports within 3 business days and provide a status update within 10 business days.

Do not include private keys, seed phrases, or real user data in a report.