Responsible Disclosure.

Responsible Disclosure
Security researchers can report vulnerabilities at info@underworldmessenger.com.
Reports should include reproduction steps, affected version, device details, logs if safe, and impact.
Researchers should not access user data, attack real users, test against third-party organizations, or publicly disclose before Underworld has time to fix.
Underworld will review reports in good faith.