Security
How we protect invoices, keys and accounts, and how to report a problem.
Signed invoices
Every issued invoice's content is signed (Ed25519 over a canonical payload) and logged in an append-only transparency log.
Report a vulnerability
Email [email protected]. We acknowledge within 72 hours under a published disclosure policy. No bug bounty; a hall of thanks.
Abuse
A report never hides a page on its own. Reports trigger a review, and payers see a neutral banner asking them to verify bank details with the sender.