Bug Reporting

PananaSwap encourages responsible disclosure of security vulnerabilities.

If you believe you have discovered a potential security issue, we ask that you report it responsibly to allow sufficient time for investigation and mitigation.


Responsible Disclosure Policy

Responsible disclosure helps protect users and the protocol.

PananaSwap requests that security issues be reported privately and without public disclosure until the issue has been reviewed and addressed.


What Should Be Reported

Please report issues related to:

  • Smart contract vulnerabilities

  • Unexpected behavior in swap execution

  • Fee calculation or enforcement issues

  • Security weaknesses affecting user funds

  • Critical frontend issues that may mislead users

Reports should focus on issues that could materially impact security or correctness.


What Should Not Be Reported

The following are not considered security issues:

  • Feature requests or UI improvements

  • Price impact due to market conditions

  • Slippage caused by low liquidity

  • Expected behavior documented in the protocol

  • Third-party wallet or network issues

Such matters should be addressed through regular support channels.


How to Submit a Report

Security issues should be reported through official channels published in PananaSwap documentation or interface.

A report should include, where possible:

  • A clear description of the issue

  • Affected contract addresses or components

  • Steps to reproduce the issue

  • Transaction hashes or screenshots (if applicable)

Providing detailed information helps expedite resolution.


Confidentiality

All valid security reports are handled confidentially.

PananaSwap commits to:

  • Reviewing reports promptly

  • Avoiding unnecessary disclosure

  • Communicating responsibly during resolution

Reporters are expected to maintain confidentiality throughout the process.


No Exploitation or Abuse

Submitting a report does not grant permission to:

  • Exploit vulnerabilities

  • Access user funds

  • Disrupt protocol operations

Any malicious activity may result in disqualification from acknowledgment or further action.


Bug Bounty Programs

PananaSwap may introduce bug bounty programs in the future.

Details, if available, will be published through official documentation and channels.


Acknowledgment

Valid and responsibly reported issues may be acknowledged at PananaSwap’s discretion.

Acknowledgment does not imply liability or guarantee of reward unless explicitly stated.


Commitment to Security

PananaSwap values collaboration with the security community.

Responsible disclosure contributes to a safer ecosystem for all users.

Last updated