If you discover a security issue in Skywire, please report it through either of these channels:

• Telegram — reach the maintainers on the dedicated technical channel @skywire. This is the fastest way to reach the people who work on the code, and the right place for anything sensitive.
• GitHub issue — open an issue at https://github.com/skycoin/skywire/issues.

We monitor both. When reporting, please include enough detail to understand and reproduce the issue — the affected version or commit, the relevant configuration, and the steps that trigger it.

Skywire is developed on the develop branch and released frequently; fixes land there first and roll out to the network in subsequent releases. Before reporting, please confirm the issue against the latest develop or the most recent release, and include the version (from skywire cli visor version, or the build info in the hypervisor UI) in your report.