Security Effective Date: 15th April 2024

At dawn protocol ("we", "us", "our"), security is a priority in our mission to provide a safe and reliable decentralised financial service. This Security Policy outlines our practices and technologies we employ to ensure the security and integrity of our platform and protect our users' data.

• Introduction
  We are committed to protecting our community against security threats. This policy informs you of our management of security risks and the mechanisms we have in place to safeguard your information.
• Scope
  This Security Policy applies to all technologies, operations, and services associated with dawn protocol accessible from www.dawnprotocol.com and any other websites or applications operated by us.
• Security Measures
  Encryption: We use strong encryption technologies to secure data at rest and in transit across our platform to prevent unauthorized access to sensitive data.
  Access Control: Access to critical infrastructure and data is limited to authorized personnel only, based on roles and responsibilities. We employ multi-factor authentication (MFA) and rigorous access controls to ensure the security of our operational environment.
  Auditing and Monitoring: Regular security audits and continuous monitoring are conducted to detect and respond to threats in a timely manner. We collaborate with external security experts to conduct penetration testing and vulnerability assessments.
  Smart Contract Security: Our smart contracts undergo thorough testing and audits by independent security firms to ensure their reliability and security before deployment.
  Incident Response: We have established an incident response plan to quickly address and mitigate the impact of a security breach. This includes prompt communication with affected parties and regulatory authorities, where applicable.
  Data Protection: We implement advanced data management practices to ensure that user data is handled securely and in compliance with relevant data protection laws.
  Network Security: We maintain a secure network infrastructure with firewalls, intrusion detection systems, and anti-malware measures to guard against unauthorised access and cyber threats.
  
• User Responsibilities
  Users of our platform are expected to contribute to the security of their accounts by:
  • Using strong, unique passwords for their accounts.
  • Enabling multi-factor authentication, if available.
  • Keeping their private keys or seed phrases secure and private.
  • Regularly updating their software to ensure they have the latest security features and fixes.
• Reporting Security Vulnerabilities
  We encourage responsible disclosure of security vulnerabilities. If you discover a security issue within our platform, please report it to us immediately via no-reply@dawnprotocol.com. We commit to timely addressing security bugs and issues reported to us.
• Updates to Our Security Policy
  We may update this Security Policy periodically to reflect changes in our practices or in response to evolving security threats. The latest version of this policy will always be posted on our website.
• Contact Us
  If you have questions or concerns about our Security Policy, or if you need to report a security incident, please contact us at:
  Email: no-reply@dawnprotocol.com
  Telegram: @dawnoperator