Please do not open a public GitHub issue for security vulnerabilities.

Report vulnerabilities privately with the Report a vulnerability button in this repository's Security tab. Reports in scope for Polygon's bug bounty programs can also go through them. See the Polygon security policy for channels, what to include, and response times.

This policy covers the @polygonlabs/oms-wallet-react-native npm package and the native bridge modules in android/ and ios/. Example apps (examples/) are not considered in scope.