NoxSend is a hackathon project running on Ethereum Sepolia only, with throwaway keys. It provides amount privacy for confidential cUSD transfers; sender/recipient addresses and wrap/unwrap amounts are public by design (see the "Honest limitations" section of the README and ARCHITECTURE.md).

Please do not open a public issue for security vulnerabilities. Instead, report them privately:

• Email edy.cu@live.com, or
• Use GitHub's private vulnerability reporting (Security → Report a vulnerability).

You'll get an acknowledgment within 48 hours and a resolution timeline after triage. Please give us a reasonable window to patch before public disclosure.