# https://base167.com/.well-known/security.txt
# RFC 9116. BASE167 has live contracts on Base mainnet holding real value, so a
# researcher who finds something needs a documented way to say so.

Contact: mailto:based@base167.com
Expires: 2027-09-01T00:00:00.000Z
Preferred-Languages: en
Canonical: https://base167.com/.well-known/security.txt
Policy: https://base167.com/terms

# Scope. The token, the season contracts and this site:
#   BASE167 token   0x2Bf0234d7E9C25687521D2d2192d1dAE70aA4f2B
#   SeasonFactory   0x8Cf6ae46C03801D8Ae7Fbdc643AF34003E83b345
#   base167.com and every API route under it
#
# The contracts are immutable and unaudited, and the terms say so. Reports about the
# claim signer, the season jobs or any route that returns a transaction are the most
# useful. Please do not run load or denial-of-service tests against the live site.