Please report security vulnerabilities to the repository maintainers via GitHub Issues marked as security.
LinkUp is non-custodial by design:
- Users hold their own private keys via Hiro Wallet
- The
linkup-custodycontract enforces spending limits but cannot move funds without user signature - No private keys are stored on any server
All Clarity contracts are open source and verifiable on Hiro Explorer: