Responsible reporting
Security policy
Report a suspected vulnerability without including passwords, private keys, identity documents or other sensitive user data.
The editorial priority is a balanced decision across fees, product access, account security, custody controls and withdrawal testing. Readers checking Ukraine should also document UAH funding costs, the onboarding entity and product-specific restrictions. The primary platform scope is the compared platforms. For a multi-platform review, use the same order size, pair, funding route and security checklist so the comparison measures like-for-like conditions. This guide records the source date and treats the logged-in account screen as the final authority for fees.
Contact
Use security@ukrainecryptoguide.com. This address must be configured before production deployment.
Scope
Reports may cover the static site, redirects, scripts, headers and domain configuration. Exchange systems and affiliate destinations are outside this site's control.
Testing limits
Do not perform denial-of-service testing, social engineering, credential attacks, automated account creation or destructive testing.
Safe evidence
Provide the affected URL, observed behavior, reproduction steps and a minimal non-sensitive proof.