# Is Amulet a security point of contact? **URL:** \ **Category:** Conversation\ **Created:** [August 1, 2023, 12:16pm UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188 "2023-08-01T12:16:46Z")\ **Posts on this page:** 10\ **Page:** 1
**Author:** ![jacobgadikian](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jacobgadikian/32/6994_2.png) [@jacobgadikian](https://forum.cosmos.network/u/jacobgadikian)\ **Post date:** [August 1, 2023, 12:16pm UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/1 "2023-08-01T12:16:47Z")
It is unclear if Amulet is a security point of contact. @Greg from informal says that the canonical path for reporting security issues is SECURITY.md in any cosmos repository. I have been informed by @Syed and Abra from the ICF that amulet is no longer a security point of contact – or maybe that they never were, except for with Barberry. I truly don’t know. Around the time of barberry, I was told that amulet would be the point of contact going forward by @jack, @zaki_iqlusion, @catdotfish, and @Syed. But now, we’ve got others saying otherwise. Additionally, @jack is saying: ![Screenshot 2023-08-14 at 3.38.15 PM](https://canada1.discourse-cdn.com/flex031/uploads/cosmos1/original/2X/8/8a55eb5cafed32c7e51a624f82ab0b3b49809613.jpeg) **note** the above screenshot is from a public chat, [Telegram: Contact @cosmonauthq](http://t.me/cosmonauthq) – you can find Jacks commentary here: > **[Jack Zampolin in CosmonautHQ](https://t.me/cosmonauthq/14206/14763)** > > A) Jessy's team is top notch and aren't even remotely a security concern. Their experience makes notional look like a joke. Y'all feel threatened by them doing the work y'all think is rightfully yours I wish to note that Notional has simply been seeking the correct reporting path for these types of issues. @Jessysaurusrex is most certainly not a security threat, nor is Amulet. The confusion, on the other hand, is a security threat. ---
**Author:** ![Syed](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/syed/32/6968_2.png) [@Syed](https://forum.cosmos.network/u/Syed)\ **Post date:** [August 1, 2023, 12:26pm UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/2 "2023-08-01T12:26:05Z")
> [@jacobgadikian](#): > > I have been informed by @Syed and Abra from the ICF that amulet is no longer a security point of contact. Just to CLARIFY, we said that [this post](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-barberry/10825) stated that the email address “barberry -at- amulet.dev” should be used for Barberry incident response. The exact quote from the post: > If your chain is running on v0.45 or below with backported features from SDK modules and you are concerned about being vulnerable to this issue, please reach out to [barberry@amulet.dev](mailto:barberry@amulet.dev) where members of the Informal Systems and Amulet teams will be on hand to help identify, if your chain is vulnerable and to assist with patching. Beyond this, every key repo has a security.md file with the latest and most accurate process for reporting vulnerabilities, e.g. [https://github.com/cosmos/gaia/blob/main/SECURITY.md](https://github.com/cosmos/gaia/blob/main/SECURITY.md) ---
**Author:** ![jacobgadikian](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jacobgadikian/32/6994_2.png) [@jacobgadikian](https://forum.cosmos.network/u/jacobgadikian)\ **Post date:** [August 1, 2023, 12:48pm UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/3 "2023-08-01T12:48:55Z")
As you know we’ve been having a conversation about this for a few days now, and it’s worrisome that there actually was not an answer to that question that could be given with any clarity or definition. **basically there’s really just one question at play here with some teeny context** Context: - at barberry I was told by many that Amulet would be the security point of contact going forward, and this information came from ICF team members and ICF funded teams. - when I asked about this a few days ago, no one could answer my question as to weather or not Amulet was a security point of contact - It is dangerous to have a lack of clarity and definition around who is the security point of contact, and for the ICF and teams that are funded by the ICF to provide inaccurate security point of contact information. Question: - Should teams contact Amulet to report security issues? (since your reply, I am surely even less sure of the answer to this question) ---
**Author:** ![jacobgadikian](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jacobgadikian/32/6994_2.png) [@jacobgadikian](https://forum.cosmos.network/u/jacobgadikian)\ **Post date:** [August 14, 2023, 7:41am UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/4 "2023-08-14T07:41:14Z")
I want to mention that I’ve been informed that there’ll be a response from the ICF by today. ---
**Author:** ![jacobgadikian](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jacobgadikian/32/6994_2.png) [@jacobgadikian](https://forum.cosmos.network/u/jacobgadikian)\ **Post date:** [August 14, 2023, 9:09am UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/5 "2023-08-14T09:09:39Z")
> [@Syed](#): > > Beyond this, every key repo has a security.md file with the latest and most accurate process for reporting vulnerabilities, e.g. [https://github.com/cosmos/gaia/blob/main/SECURITY.md](https://github.com/cosmos/gaia/blob/main/SECURITY.md) I do understand what you’re saying though it doesn’t jibe with what I remember. Anyhow it is certainly not what some others are saying which is why I’m seeking clarity on the matter. Thank you. ---
**Author:** ![jacobgadikian](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jacobgadikian/32/6994_2.png) [@jacobgadikian](https://forum.cosmos.network/u/jacobgadikian)\ **Post date:** [August 18, 2023, 6:52am UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/6 "2023-08-18T06:52:55Z")
Bump. @Syed @ebuchman – I would like to know if amulet is a security plate of contact and for what, if they are. ---
**Author:** ![jacobgadikian](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jacobgadikian/32/6994_2.png) [@jacobgadikian](https://forum.cosmos.network/u/jacobgadikian)\ **Post date:** [August 22, 2023, 4:32am UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/7 "2023-08-22T04:32:54Z")
Is anybody able to clarify this item for me? I’m getting markedly different answers depending on who I speak to. ---
**Author:** ![mmulji](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/mmulji/32/2787_2.png) [@mmulji](https://forum.cosmos.network/u/mmulji)\ **Post date:** [August 23, 2023, 9:50am UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/8 "2023-08-23T09:50:03Z")
@jacobgadikian this has been something that was in the works for sometime, but not finalised, hence the lack of clarity. Seems that it has been finalised, see the Amulet announcement from the ICF: > **[Amulet: Strengthening security across the interchain](https://medium.com/the-interchain-foundation/amulet-strengthening-security-across-the-interchain-fa4b0bafadb4)** > > The ICF is proud to announce a new long-term engagement with Amulet — leading incident response across the interchain. ---
**Author:** ![jacobgadikian](https://yyz1.discourse-cdn.com/flex031/user_avatar/forum.cosmos.network/jacobgadikian/32/6994_2.png) [@jacobgadikian](https://forum.cosmos.network/u/jacobgadikian)\ **Post date:** [August 24, 2023, 10:39am UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/9 "2023-08-24T10:39:29Z")
Thanks! I very much appreciate the clarity. ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex031/uploads/cosmos1/original/2X/2/2a3beb3e0f97ddad3b51a8d0d4a22abaa95604d8.png) [@system](https://forum.cosmos.network/u/system)\ **Post date:** [September 7, 2023, 10:40am UTC](https://forum.cosmos.network/t/is-amulet-a-security-point-of-contact/11188/10 "2023-09-07T10:40:08Z")
This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.