# scam-coin.com — yes that's the actual domain — security disclosure policy
# We're a satirical Solana memecoin with a Telegram swap bot.
# Yes, "scam" is in our name. The joke is on us. Please report real bugs anyway.

Contact: mailto:security@scam-coin.com
Expires: 2027-06-05T19:49:27.787Z
Preferred-Languages: en
Canonical: https://scam-coin.com/.well-known/security.txt
Policy: https://scam-coin.com/

# Scope
# - scam-coin.com (marketing)
# - bot.scam-coin.com (non-custodial Telegram swap bot)
# Out of scope: anything you have to be a believer to call a vulnerability.

# Bounty
# We pay in heartfelt gratitude and the warm feeling of having done a good thing.
# (We're a memecoin. We don't have a treasury. Sorry.)