Help keep PonsVille safe.
If you discover a vulnerability, report it privately through the official contact below. Do not include private keys, seed phrases or unnecessary personal data.
Security contact
Send a private report to:
security@ponsville.com Write report →Never send seed phrases, private keys or real funds.
What to include
- A clear description of the issue and its potential impact.
- The affected URL, component or contract file.
- Safe reproduction steps and a proof of concept where useful.
- A way to contact you if you want a response.
Safe harbor boundaries
Use test accounts and the minimum access needed to demonstrate an issue. Do not access another person's data, disrupt availability, use social engineering, publish an unpatched vulnerability or move real assets.
Wallet safety
- PonsVille will never ask you to paste a private key or seed phrase.
- Wallet selection requests a public address and may request a switch to Robinhood Chain.
- The public address keys the character saved in that browser. It does not authorize spending.
- The current game connection flow does not request a signature or transaction.
- ETH rewards use an operator-run distributor. Players do not need to submit a claim transaction.
- No reward vault contract is listed as live. The public token address and reward status are documented separately.
Verification
Machine-readable policy: security.txt →
Machine-readable dApp identity: dApp metadata →