Responsible disclosure

The Lotvs MCP server moves real money, inside a limit its owner sets. If you find a way around that limit, a way to reach anything outside an agent’s account, or any other weakness, please tell us before telling anyone else.

Write to legal@ysniper.com with what you found and how to reproduce it.

• Please do not open a public issue for a security problem.
• Do not test against accounts that are not yours.
• Do not move money that is not yours, or try to read another person’s data.

We will confirm we received your report and keep you informed as we fix it.