The full Nolus security policy, including scope, rewards, disclosure and source access for researchers, lives at https://docs.nolus.io/protocol/security.

Email security@nolus.io. Do not open a public issue or pull request for security matters.

Most Nolus repositories are private. Security researchers can request access as described on the policy page.