If you discover a security vulnerability, please:

1. DO NOT open a public issue
2. Email security concerns privately to the maintainers
3. Include a detailed description of the vulnerability
4. Allow reasonable time for a fix before public disclosure
5. Include affected network, contract name, and any relevant txid when available

The TimeFi Protocol implements the following security measures:

• Access Controls: All admin functions require deployer authorization
• Input Validation: All parameters are validated against defined limits
• Time-Lock Protection: Vaults cannot be withdrawn before unlock time
• Fee Limits: Fees are capped at protocol constants

• This contract has not been audited. Use at your own risk.
• The protocol relies on stacks-block-time for time calculations
• Bot approval uses contract-hash? which requires contract principals

1. Only deposit amounts you can afford to lock
2. Verify the unlock time before creating a vault
3. Test with small amounts first
4. Keep your wallet keys secure

For security concerns, please contact the maintainers privately.

Primary Contact: adekunlebamz (GitHub)