Please see https://github.com/zcash/ZcashLightClientKit/blob/master/responsible_disclosure.md