security: remove rustcorp.com contact
What changed, and why it matters
This commit simply updates the project's security contact information. It removes a personal email address (rusty@rustcorp.com.au) and keeps only the corporate security address (security@blockstream.com). There is no code change, no vulnerability fix, and no security flaw introduced.
No security action required. This is a routine documentation/contact update.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch modifies SECURITY.md only. It removes rusty@rustcorp.com.au from the vulnerability reporting contact list, leaving only security@blockstream.com, and updates the surrounding wording from plural to singular. No source code, build system, or configuration is affected.
Changed components
SECURITY.mdInspect captured patch +2 / −3
diff --git a/SECURITY.md b/SECURITY.md
index b706fbc8..d42e153d 100644
--- a/SECURITY.md
+++ b/SECURITY.md
@@ -6,11 +6,10 @@ We have a 3 month release cycle, and the last two versions are supported.
## Reporting a Vulnerability
-To report security vulnerabilities, please send an email to one of the following addresses:
-- `rusty@rustcorp.com.au`
+To report security vulnerabilities, please send an email to:
- `security@blockstream.com`
-Note: These email addresses are exclusively for vulnerability reporting.
+Note: This email address is exclusively for vulnerability reporting.
For all other inquiries/communication, please refer to the [Reach Out to Us](https://github.com/ElementsProject/lightning?tab=readme-ov-file#reach-out-to-us) section in our README.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.