Security
Security is a core priority for Alto. All third-party security audit reports, known issues, and the latest bug bounty terms are maintained in a dedicated public GitHub repository:
- Audit reports and security overview: https://github.com/altomoney/security-review-engagements
The GitHub repository is the single source of truth for:
- Completed and in-progress security reviews
- Links to full audit reports
- Current bug bounty scope, rules, and rewards
- Any published known issues and residual risks
If you believe you have found a vulnerability, please follow the disclosure instructions in the GitHub repository, or contact:
- Email: security@altofoundation.org