# Security policy for $PREDICT AIRDROP

## Supported versions
Only the latest deployed build of the site is supported.

## Reporting a vulnerability
Email **security@predict-airdrops.fun** with:
- affected URL / page,
- steps to reproduce or proof-of-concept,
- impact assessment if known.

We acknowledge reports within 48 hours and aim to fix critical issues within 7 days.

## Safe harbor
We will not pursue legal action against researchers who:
- use only their own accounts/wallets,
- avoid service degradation (no DoS),
- do not access other users' data,
- give us reasonable time before public disclosure.

## Scope
- predict-airdrops.fun (all pages)
- static assets under /assets/

Out of scope: third-party RPC endpoints linked by the checker, wallet browser extensions themselves.

## General security contact
security@predict-airdrops.fun