This repository is an educational / testnet demo. The contracts are unaudited and are deployed only to Anvil (31337) and Sepolia (11155111). They must never be used on mainnet or with real funds. Reports that help keep the demo correct and safe are still welcome — treat them as improvements to learning material, not as a production incident response.

Please use GitHub's private vulnerability reporting for this repository — do not open a public issue and do not send the report over social media:

1. Open the repository's Security tab.
2. Click Report a vulnerability.
3. Fill in the advisory form (description, impact, and steps to reproduce).

Direct link (once the repository is public): https://github.com/MohammedSoliman10/tokenized-vault/security/advisories/new

You should receive an acknowledgment when the maintainer is available. Please allow reasonable time for a response before any disclosure; this is a demo project maintained in spare time.