If you discover a security vulnerability in DZEconomy, please report it responsibly.

⚠️ Do NOT open a public GitHub issue for security vulnerabilities.

1. Email: Send a detailed report to security@demonzdevelopment.online
2. Include:
   • Description of the vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (if any)

• Acknowledgment within 48 hours
• Assessment within 7 days
• Fix timeline communicated after assessment
• Credit in the release notes (if desired)

Security issues in the following areas are in scope:

• Data integrity — Balance manipulation, unauthorized currency modification
• Authentication bypass — Permission checks that can be circumvented
• SQL injection — Via MySQL storage backend
• Denial of service — Commands or actions that crash the server
• Information disclosure — Exposing player data to unauthorized users

• Issues requiring physical access to the server
• Social engineering attacks
• Issues in third-party dependencies (report upstream)

Thank you for helping keep DZEconomy and its users safe! 🙏