Security

NightWatch Labs — Updated: 2026-10-15

Report a vulnerability

• Email security@nightwatchprotocol.com.
• Expect a first response within 5 business days.
• Please do not disclose publicly before we ship a fix.

What we do not hold

• We do not hold exchange API keys for users.
• Torii mandates are enforced on-chain (on testnet today).

Scope

• nightwatchprotocol.com
• toriiwallet.com
• The NightWatch API host

Safe harbour

We will not pursue action against good-faith research that stays in scope, avoids harm to other users, and is reported to us privately.

Machine-readable policy: security.txt.