Security

Report vulnerabilities to security@ylalo.com. See /.well-known/security.txt.

Trading keys are encrypted at rest. Agents cannot withdraw. Prefer scoped ylk_ keys and sandbox accounts for automation.