> For the complete documentation index, see [llms.txt](https://docs.hann.finance/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.hann.finance/zh/security/audits-and-security.md).

# 审计与漏洞报告

漏洞报告、合约参考和安全公告

## 报告漏洞

将漏洞报告发送至 <security@hann.finance>，并提供：

1. 受影响的网络、合约、应用页面或集成。
2. 问题描述及对资金、权限或数据的影响。
3. 复现步骤、交易 ID 或最小复现案例。
4. 适用时用于确认报告或接收奖励的钱包地址。

Hann Finance 采用协调披露方式：先向团队提交报告，以便在公开披露前协调调查和修复。

## 合约与交易权限

[智能合约](/zh/developers/smart-contracts.md)列出部署参考。检查交易时，对照所选网络、代币和合约地址。

代币授权和 Permit2 权限规定谁能使用代币、可用数量及到期时间。兑换或借款交易失败，不会撤销此前的授权额度。

兑换限制保护指定输出量和执行时间。[Zapper 指南](/zh/protocol/zapper.md)说明授权与组合操作；[风险披露](/zh/security/risk-disclosure.md)说明清算、预言机、金库和跨链条件。

## 公告

安全公告通过 Hann Finance 官方渠道发布：

* [网站](https://hann.finance)
* [𝕏](https://x.com/HannFinance)
* [Discord](https://discord.gg/tzUgd7c68P)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://docs.hann.finance/zh/security/audits-and-security.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.