BaseProofPay's public demo is static and read-only. It must not request wallet access, signatures, token approvals, transfers, or credentials.

Please report security issues privately to the repository owner. Do not include private keys, seed phrases, API keys, wallet sessions, or confidential payment records in an issue.