如果你发现了指尖冒险的安全漏洞（例如能看到别人的账号数据、绕过付费或家长控制、注入脚本），请不要公开提交 Issue，私下告诉我们：

• 在本仓库的 Security › Report a vulnerability 提交私密报告，或者
• 发邮件到 hello@yldm.ai，标题注明「安全」。

请写清楚受影响的平台和版本、重现步骤，以及可能造成的影响。我们会尽快确认，修复并发布后再公开细节。请不要访问、修改或删除不属于你的数据，也不要影响其他玩家的正常使用。

If you find a security vulnerability in TapTapGo (for example seeing another account's data, bypassing payment or parental controls, or injecting script), do not open a public issue. Report it privately through Security › Report a vulnerability or by email to hello@yldm.ai with "Security" in the subject. Include the affected platform and version, the steps to reproduce and the likely impact. We will confirm it as soon as we can and publish details only after a fix has shipped. Please do not access, change or delete data that is not yours, or disrupt other players.