Please report any vulnerability on any bug that could potentially affect the security of user's funds by mail to qlrddev@proton.me.

Additionally, you could send a copy to joaomcr@proton.me.

You may use PGP encryption and signing. The public keys can be found here and here.

In the subject type, please type [Krux-installer] Security Report: <short description> and in the body a long description describing the issue. We aim to respond within one week and patch within 90 days.