# Responsible Disclosure

This policy has moved to the Phala Cloud repository:

**<https://github.com/Phala-Network/phala-cloud/blob/main/SECURITY.md>**

Phala's Responsible Disclosure and Bug Bounty program now covers Phala Cloud. See that policy for scope, reporting requirements, researcher rules, and bounty ranges. Report security issues by email to <cert@phala.com>.

Phala Network, the blockchain in this repository, is retired and no longer production-operated. The chain, parachain, runtime, pRuntime, pherry, runtime-bridge, and Phat Contract are out of scope for the program, and vulnerabilities in them are not eligible for a bounty. If you believe an issue here also affects Phala Cloud, report it under the Phala Cloud policy and say how it reaches production.