This app has not undergone an independent security audit. It's deployed as a demo against Stellar Testnet. Do not use it for real evidence or real personal data without an audit first.
Email devt14985@gmail.com with a description of the issue and reproduction steps. Do not open a public GitHub issue for security vulnerabilities.
You should get an acknowledgement within 5 business days. Once a fix is available, we'll coordinate disclosure timing with you.
In scope: this web app and its Freighter wallet integration. Out of scope: afterprint-api, afterprint-ai, afterprint-contracts (report those in their own repos), and third-party infrastructure (Vercel, Freighter itself).