Merge pull request #59 from geniusyield/create-security-file

Create SECURITY.md

SECURITY.md

@@ -0,0 +1,17 @@
+# Security Policy
+
+## Reporting a Vulnerability
+
+### Smart contracts - Bug bounty program
+
+As part of our commitment to the security of [our smart contracts](https://github.com/geniusyield/dex-contracts-api/tree/main/geniusyield-onchain), we are inviting ethical hackers and security researchers to help us identify vulnerabilities in our smart contracts. 
+By participating in our program, you will have the opportunity to earn rewards for responsibly disclosing and reporting security issues to us.
+Please find the terms and conditions, and how to submit reports here : https://immunefi.com/bug-bounty/geniusyield/
+
+### Others 
+
+For any vulnerability outside the smart contracts scope, please report with the built-in Github functionality in the *Security* tab:
+ - [Security Advisories](https://github.com/geniusyield/market-maker/security/advisories)
+
+Further information is availabe in the official GitHub Documentation:
+ - [GitHub Documentation: Privately reporting a security vulnerability](https://docs.github.com/en/code-security/security-advisories/guidance-on-reporting-and-writing/privately-reporting-a-security-vulnerability)