If you believe you have found a security vulnerability in Thor, we encourage you to responsibly disclose this and NOT open a public issue. We will investigate all legitimate reports.
Email support@vechain.org to disclose any security vulnerabilities. Alternatively, you can visit this link to submit a ticket or find more information.