From b717fa555614bf3014b0741ecde320d9619066ec Mon Sep 17 00:00:00 2001
From: pezkuwichain <info@pezkuwichain.io>
Date: Tue, 21 Apr 2026 20:26:11 +0000
Subject: [PATCH] =?UTF-8?q?docs:=20add=20SECURITY.md=20=E2=80=94=20vulnera?=
 =?UTF-8?q?bility=20disclosure=20policy?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 SECURITY.md | 39 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 39 insertions(+)
 create mode 100644 SECURITY.md

diff --git a/SECURITY.md b/SECURITY.md
new file mode 100644
index 00000000..cebfa665
--- /dev/null
+++ b/SECURITY.md
@@ -0,0 +1,39 @@
+# Security Policy
+
+## Supported Versions
+
+| Version | Supported |
+|---------|-----------|
+| latest (mainnet) | ✅ |
+| older releases | ❌ |
+
+## Reporting a Vulnerability
+
+**Do NOT open a public issue for security vulnerabilities.**
+
+Please report security vulnerabilities by emailing:
+
+📧 **security@pezkuwichain.io**
+
+Include:
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested fix (optional)
+
+We will acknowledge receipt within **48 hours** and provide a detailed response within **7 days**.
+
+## Disclosure Policy
+
+We follow [coordinated disclosure](https://en.wikipedia.org/wiki/Coordinated_vulnerability_disclosure).
+Once a fix is ready, we will:
+
+1. Notify the reporter
+2. Release a patched version
+3. Publish a security advisory
+
+## Bug Bounty
+
+There is currently no formal bug bounty program.
+Significant vulnerability reporters will be acknowledged in release notes.
+