CertiChain handles academic credential proofs and cryptographic hashes. We take security seriously.

If you believe you have found a security vulnerability in:

1. CertificateRegistry.sol (EVM Smart Contract)
2. SHA-256 byte hashing pipeline or Multer PDF magic-byte validation
3. JWT Authentication & Role-Based Access Control (RBAC)
4. Fraud Scoring Engine or Tamper Classification logic

Please DO NOT disclose the issue publicly via GitHub Issues.

Instead, please send an encrypted email or report directly to: security@certichain.io or open a private security advisory through GitHub Security Advisories.

We will acknowledge receipt within 24 hours and provide an estimated remediation timeline.