Report a security issue

Email security@shaftkings.gg. It goes straight to our engineers, and you'll hear back within 2 business days.

Keep it private. Don't post it in the chat, on Discord or on social media, and don't use the bug while you wait.

What to send

• What you found, and what someone could do with it.
• The steps to make it happen again, starting from signing in.
• The usernames of the accounts you used. Use only accounts you own.
• Any bet links, transaction links or request IDs involved.
• A screenshot or a short screen recording, if that's easier to show.
• The name you'd like us to credit, if you'd like credit.

What happens next

1. Within 2 business days, we reply to say we have it.

2. Within 10 business days, we confirm the bug, or explain why it isn't a security issue.

3. We keep you posted while we fix it, and tell you when it's fixed.

4. If it qualifies for a reward, we pay you within 14 days of confirming it. See Bug bounty rewards.

Already told us in the chat?

Email security@shaftkings.gg anyway, with your username and roughly when you messaged us, so it reaches the right people.