If you believe you have found a security or privacy issue in Taproot Assets, please email security@lightning.engineering. Do not publish vulnerability details in a public GitHub issue or pull request. This address is for security reports, not general support.

Please include the affected version or commit, the potential impact, and steps to reproduce the issue. A minimal test case or proof of concept is helpful.

For the public key used to encrypt sensitive reports, see the lnd security policy.