Skip to content

Security: oroderico/origo

Security

SECURITY.md

Security policy

Origo is an offline calculation tool, not a hardware wallet. Never include a real mnemonic, passphrase, entropy transcript, private key, or funded address in an issue, log, screenshot, crash report, or test vector.

Report vulnerabilities through a private GitHub security advisory for this repository. Include reproducible steps using public test vectors only.

The supported version is the current main branch. A build is considered releaseable only after the automated deterministic-build and ELF audits pass and the resulting firmware has completed a physical TTGO T-Display smoke test.

There aren't any published security advisories