Skip to content
Quantix Security Labs

Submit a research finding.

Report one vulnerability per submission, privately. Include enough detail for a reviewer to reproduce it. Receipt is confirmed on this page only after the server has accepted your submission.

Before you submit: check the programme scope and rules, and the severity guidelines.

Never include private keys, seed phrases, credentials or other users’ data. Share proof-of-concept code through a private repository link.

Not accepting submissions: Axeline Bridge (paused), Quarrystone Payments (scheduled).

Used for credit if you want to be credited.

Use the component name or identifier from the programme scope.

Rated against the severity guidelines. The reviewer confirms or adjusts it.

A private repository or gist with a test that reproduces the issue. Share access only with the reviewer.

Fields marked with * are required.