Security

Responsible disclosure

If you believe you have found a security issue, email security@innomium.com with a clear description, steps to reproduce, and impact. Do not publicly disclose until we have confirmed a fix or coordinated a timeline.

We aim to acknowledge reports within 3 business days. Please avoid accessing other users’ data, disrupting service, or testing against production payment rails.

Scope

• Arena web app at https://build.innomium.com
• Authentication, authorization, and data isolation bugs
• Manual and cryptocurrency payout-recording issues