# Security Disclosure Policy for RealFi Coin

## About RealFi Coin
RealFi Coin (realficoin.com) is a legitimate Web3 DeFi platform.

## Legitimate Operations
- Official Domain: realficoin.com
- Uses standard wallet connection protocols (WalletConnect, MetaMask)
- NEVER requests private keys or seed phrases
- All transactions are transparent on-chain
- Built with: Next.js, RainbowKit, Wagmi, Viem

## Security Practices
- Content Security Policy enabled
- XSS Protection enabled
- Secure headers configured
- Regular security audits

## Incorrect Flagging
If this domain has been incorrectly flagged as malicious:
- This is a false positive
- We use standard Web3 authentication methods
- All code follows Web3 best practices
- No malicious code or phishing attempts

## Contact
Security Contact: security@realficoin.com
Report Issues: https://github.com/[your-repo]/security

## Verification
Last Updated: 2025-10-20
Canonical URL: https://realficoin.com/.well-known/security-disclosure.txt