Aurum is a learning and showcase system for exchange correctness and blockchain settlement. It is not production custody software and has not undergone a professional security audit.

If you discover a security-sensitive defect, avoid publishing exploit details until the maintainer has had a reasonable opportunity to investigate. Include the affected component, reproduction conditions, impact, and whether the issue can move or mis-account funds.

The development signer, local Anvil keys, demo database credentials, and TestGold contract are intentionally unsafe for real assets. Never reuse them outside isolated development environments.