Please do not disclose an unpatched vulnerability in a public GitHub issue. Use GitHub's private security-advisory reporting for this repository or the private security contact published at https://morphogen.org. Include affected contracts, impact, prerequisites, and a minimal reproducer.

Only the latest main release is supported. Deployed addresses and release commitments must be verified against the Morphogen website and chain explorers; source availability is not proof that a particular address contains the same bytecode.