This project handles Stellar secret keys and escrow-related sensitive data. If you discover a security vulnerability, please report it responsibly.
Do not file a public issue — instead, send an email to security@arbitra.dev.
We aim to acknowledge receipt within 48 hours and provide an initial assessment within 5 business days.
- AI Agent core and tool calling
- Stellar/ Soroban integration and key management
- API endpoints and authentication
- Data storage and secrets handling
- Dependency security
| Version | Supported |
|---|---|
| latest | ✅ |
| older | ❌ |
We follow a coordinated disclosure process. We will work with you to understand the issue and plan a fix before public disclosure.