Contributing

OWASP Web3 Wallet Security is an open, community-driven project. We welcome researchers, developers, auditors, organizations, academics, and community members interested in improving Web3 wallet security.

Ways to Contribute

Contributions may include new security risks, research findings, security requirements, testing methods, technical references, documentation improvements, or reviews of existing work.

Contribution Guidelines

Contributions should be technically accurate, relevant to Web3 wallet security, vendor-neutral, and supported by credible evidence where applicable. Broader security issues are preferred over findings limited to a single implementation.

Evidence & References

Research, audits, CVEs, incidents, specifications, and reproducible testing can be used as supporting evidence. External work must be properly referenced and credited to its original authors.

Responsible Security Research

Only submit research conducted legally and with proper authorization. Do not include private keys, seed phrases, credentials, personal information, or other sensitive data.

Undisclosed vulnerabilities should follow appropriate responsible disclosure practices before public submission.

Vendor Neutrality

The project does not promote or rank specific wallet vendors or commercial products. Contributions from companies are welcome but are reviewed under the same technical and community standards as all other contributions.

Collaboration With Other Security Projects

We welcome collaboration with other OWASP projects, researchers, security organizations, wallet developers, open-source communities, and academic institutions.

Where relevant work already exists, we encourage referencing, extending, or collaborating on that work rather than unnecessarily duplicating it.

Attribution

Researchers and organizations should receive appropriate credit for work that contributes to the project. Referencing external research does not transfer ownership of that research to OWASP.

Review Process

Submissions are reviewed for technical accuracy, relevance, evidence, scope, and alignment with the project's goals. Maintainers and community members may request changes or additional supporting information before acceptance.

Avoiding Duplicate Work

Before proposing significant new material, contributors should review existing project content and related research. Existing work should be improved or extended where appropriate instead of creating duplicate material.

Code of Conduct

All contributors are expected to communicate respectfully and participate constructively. Harassment, discrimination, personal attacks, or intentionally disruptive behavior are not acceptable within project spaces.

Contribute on GitHub

Ready to contribute? Visit the project's GitHub repository and open a contribution request with your proposal, research, references, or suggested improvement.

Help us build an open, community-driven security resource for the Web3 wallet ecosystem.