Report privately
Email spawnfarmCTO@proton.me with the subject Security report. Provide the affected URL or contract, impact, reproduction steps and the smallest safe example. Use test environments where possible. Do not exploit other users, move their funds, publish private data or disrupt production to prove a finding.
This is a vulnerability reporting channel. It does not promise a bounty, payment, blanket legal authorization or round-the-clock monitoring. We will review reports and coordinate a response where we can. Request a secure exchange method before sending particularly sensitive details.
Verify the token and network
The original $SPAWN contract is 0x41080c9d7908CE567eFe239042c49D8159a2A3bb on Robinhood Chain. Check the full address using Official $SPAWN and the linked explorer. A matching name, ticker or logo does not establish identity.
Protect wallet permissions
Spawn does not ask for keys or recovery phrases. Examine every approval and transaction before signing, including network, amount, recipient and contract. Disconnecting a website does not cancel an on-chain allowance. Use your wallet's supported tools to inspect and revoke permissions when needed.
Treat unsolicited support messages and requests to send funds as suspicious. Obtain contact information from the website rather than a private message. Refer rights complaints to Takedown Requests; emergencies require the appropriate immediate authority.