From 2a4dd7091e23bc15911bef8189ea9403a79680dc Mon Sep 17 00:00:00 2001 From: Eoghan McKee Date: Thu, 20 Aug 2026 11:22:21 +0100 Subject: [PATCH] chore(docs): update security disclosure contact to disclosure@sqds.io Co-authored-by: Cursor --- SECURITY.md | 4 ++-- programs/squads_multisig_program/src/lib.rs | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/SECURITY.md b/SECURITY.md index 53cbc433..bfdc173f 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -4,13 +4,13 @@ Learn more about Squads perpetual bug bounty program 2. Incident response process 3. Security bug bounties ### Reporting security problems -DO NOT CREATE AN ISSUE to report a security problem. Instead, please send an email to security@sqds.io and provide your GitHub username so we can add you to a new draft security advisory for further discussion. +DO NOT CREATE AN ISSUE to report a security problem. Instead, please send an email to disclosure@sqds.io and provide your GitHub username so we can add you to a new draft security advisory for further discussion. For security reasons, we do not accept vulnerability disclosures presently via email, nor do we accept attachments when provided via email for vulnerability disclosures. We suggest that you ensure that multi-factor authentication is enabled on your account prior to submitting. ### Incident response process In case an incident is discovered or reported, the following process will be followed to contain, respond and remediate: 1. Establish a new draft security advisory -In response to an email to security@sqds.so, a member of the Squads team will: +In response to an email to disclosure@sqds.io, a member of the Squads team will: * create a new draft security advisory for the incident at * add the reporter's Github user and the squads-protocol/security-incident-response-team group to the draft security advisory * create a private fork of the repository (grey button towards the bottom of the page) diff --git a/programs/squads_multisig_program/src/lib.rs b/programs/squads_multisig_program/src/lib.rs index 2ae5b8d9..c8d41221 100644 --- a/programs/squads_multisig_program/src/lib.rs +++ b/programs/squads_multisig_program/src/lib.rs @@ -25,7 +25,7 @@ mod utils; security_txt! { name: "Squads Multisig Program", project_url: "https://squads.so", - contacts: "email:security@sqds.io,email:contact@osec.io", + contacts: "email:disclosure@sqds.io,email:contact@osec.io", policy: "https://github.com/Squads-Protocol/v4/blob/main/SECURITY.md", preferred_languages: "en", source_code: "https://github.com/squads-protocol/v4",