Security

If you find a security issue in the stxer API, SDK, inspector, explorer or this site, please tell us privately before disclosing it.

• Report to: [contact email]. Include what you found, how to reproduce it, and what it affects.
• Please do not access other people's data, degrade the service, or run large volumes of requests while testing.
• We will acknowledge your report, keep you updated while we work on a fix, and agree a disclosure date with you. We are happy to credit you if you want.

We do not run a bug bounty programme at this time.

Simulations are readable by anyone with the id, so never put private keys or other secrets in simulated transactions or code.