NEAR Wallet is an open-source project, created to provide an user-friendly and non-custodial solution to manage assets on NEAR Protocol. The policies to report security issues on NEAR Wallet are the same as nearcore. Please refer to this document to disclose a vulnerability and, if eligible, receive a bounty.
If you have any suggestions or comments about the security policy, please email the NEAR Security Team at security@near.org