Security

Verify. Don't trust blindly.

Security is part of the public surface of Phinancer. Know how to verify releases, identify official domains, report vulnerabilities and avoid common crypto scams.

Official domains

Always check the domain.

phinancer.com

docs.phinancer.com

explorer.phinancer.com (when open)

faucet.phinancer.com (when open)

api.phinancer.com (when open)

/.well-known/security.txt

Verify downloads

Never install a binary without verifying its origin. Check the SHA-256, the signature and the release key. Per-OS instructions accompany each release.

Responsible disclosure

Report vulnerabilities to security@phinancer.com with PGP. Include reproduction steps and impact. Response SLA when defined; bug bounty in the future.

PGP key →

Anti-phishing

• The Foundation never asks for your seed phrase.

• Cert holders must never ask for your seed phrase.

• Beware fake airdrops, fake groups and fake support.

• Always check the domain before connecting a wallet.