Skip to content

Critical Contacts

Security SpecialistOperations & Strategy

Keep this updated. Stale contacts during an incident waste critical time.

Last verified: [DATE]


Emergency Contacts

SEAL 911

Industry-wide emergency response coordination for Web3 security incidents.

FieldValue
Websitehttps://securityalliance.org/seal-911
When to contactActive exploits, cross-protocol incidents, need for industry coordination
How to contact[Add contact method from their site]

SEAL 911 can help coordinate response across the industry and connect you with security researchers and other affected protocols during major incidents.


Internal Team

Tip: Use team/group emails (e.g., team-security@company.com) instead of personal contacts where possible. Group emails are more resilient to team changes and reduce maintenance burden.

Decision Makers

RoleNamePhoneTelegram/SignalEmail

Subject Matter Experts

DomainPrimaryBackupContact
Smart Contracts
Infrastructure
Frontend
Security

On-Call

ScheduleCurrent On-CallRotation Link

Security Partners

Auditors

FirmPrimary ContactEmailWhen to Contact
Code review, vulnerability assessment

Incident Response Retainer

FirmPrimary ContactPhoneEmail

Bug Bounty Platform

PlatformProgram LinkContact

Infrastructure Vendors

ServiceProviderSupport ContactEscalation
Hosting
CDN
DNS
RPC Provider
Monitoring

Legal & Communications

RoleName/FirmContact
Legal Counsel
PR/Communications

Key Partners

Protocols, exchanges, or other partners to notify during major incidents.

PartnerRelationshipContactWhen to Notify

Communication Channels

PurposePlatformChannel/Link
Incident coordination
Public updates
Team alerts

Quick Reference - P1 Escalation

For P1 (critical) incidents, contact in this order:

  1. SEAL 911 (if active exploit)
  2. Decision Makers (internal)
  3. Security Partners (if needed)
  4. Legal (if fund loss or regulatory implications)

Maintenance

  • Review and update quarterly
  • Verify contact info after team changes
  • Test escalation paths periodically

Owner: [Assign someone to maintain this document]


See Incident-Response-Policy and Roles-and-Staffing for how these contacts fit into the response process.