It is important to create a policy for reporting security vulnerabilities for smart contract and blockchain projects outside of github issues. This can often be a security.md or SECURITY.md file that is referenced in the readme.md
Example:
see https://github.com/CosmosContracts/juno/blob/main/SECURITY.md as an example from the cosmos ecosystem.
Full Disclosure:
I am a part of SecurityDAO https://secdao.xyz/ and our DAO does security audits and security consulting for cosmos projects and cosmwasm smart contracts
┆Issue is synchronized with this Jira Task by Unito