Farcaster - Security Policy

Last updated October 30, 2026

If you find a security bug in something we run, email [email protected]. We pay for valid reports. Please use PGP to encrypt anything that includes a working exploit. Include the target and its version or commit, the steps to reproduce, the impact, and a proof of concept. Only include one bug per email. You must use responsible disclosure to qualify for a payment.