Security Policy
Last Updated: February 26, 2026
Reporting a Vulnerability
Block Nexus Labs takes the security of our systems and our clients' data seriously. If you believe you have discovered a security vulnerability in any of our services or infrastructure, we encourage you to disclose it to us responsibly.
Please report security vulnerabilities by emailing: contact@blocknexus.tech
What to Include
To help us triage and resolve your report as quickly as possible, please include:
- A description of the vulnerability and its potential impact
- The affected URL, endpoint, or component
- Steps to reproduce the issue
- Any proof-of-concept code or screenshots (if applicable)
- Your contact information for follow-up
Our Commitment
- We will acknowledge receipt of your report within 3 business days
- We will investigate and keep you informed of our progress
- We will work to remediate confirmed vulnerabilities in a timely manner
- We will not pursue legal action against researchers who follow this policy in good faith
Scope
This policy applies to all Block Nexus Labs owned and operated web properties, including blocknexus.tech and associated subdomains.
Out of Scope
The following are outside the scope of this policy:
- Denial of service attacks
- Social engineering or phishing of Block Nexus Labs staff
- Physical security issues
- Vulnerabilities in third-party services we rely on (please report those directly to the vendor)
Preferred Languages
English