Preferred contact
Reporting a Vulnerability
If you believe you have discovered a security vulnerability in Dead Man's Hand (DMH), please report it to:
[email protected]Please include
A concise report helps us reproduce, assess, and resolve the issue more quickly.
- 01Description of the issue
- 02Steps to reproduce
- 03Potential impact
- 04Proof of concept, if available
Scope
In scope
- dmh.syntrope.app
- Public APIs owned by DMH
Out of scope
- Denial of Service attacks
- Social engineering
- Physical attacks
- Vulnerabilities requiring access to third-party systems
Rules
- 1
Do not access or modify other users’ data.
- 2
Do not perform actions that could impact service availability.
- 3
Use test accounts whenever possible.
- 4
Give us reasonable time to investigate and fix the issue before public disclosure.
Recognition
Researchers who report valid vulnerabilities may be listed on the DMH Security Hall of Fame.
Thank you for helping keep DMH secure.