Translations:Reporting/155/en
From VRChat Wiki
The VRChat website should be used to report security exploits for VRChat or its services. It is requested that the inclusion of "proof-of-concept, documentation, background, attack scenarios, potential mitigations, etc." are ideal, and that "video, screenshots, chat logs, hearsay, etc alone are not useful and do not constitute an exploit disclosure".