-
Notifications
You must be signed in to change notification settings - Fork 117
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Three semantically distinct contract errors share the same wire discriminant (24)
auditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardseverity: elevatedCorrectness/robustness gap with user-visible impactCorrectness/robustness gap with user-visible impactThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1164 In Favourorg/Stellar-forge;Cross-tab
localStoragenetwork sync can retarget an in-progress form's contractauditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardseverity: highBroken core feature or exploitable abuse vectorBroken core feature or exploitable abuse vectorThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1163 In Favourorg/Stellar-forge;Rate-limit bucket shared between public challenge issuance and authenticated actions enables griefing DoS
apiServerless API under api/Serverless API under api/auditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardseverity: highBroken core feature or exploitable abuse vectorBroken core feature or exploitable abuse vectorThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1162 In Favourorg/Stellar-forge;The mainnet confirmation modal the README promises is unreachable dead code
auditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardseverity: criticalFunds/consensus/permanent-brick riskFunds/consensus/permanent-brick riskThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1157 In Favourorg/Stellar-forge;🟡 Rate limiter silently degrades to a non-durable no-op
apiServerless API under api/Serverless API under api/auditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: elevatedCorrectness/robustness gap with user-visible impactCorrectness/robustness gap with user-visible impactThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1102 In Favourorg/Stellar-forge;🟠 Contract
upgradehas no on-chain event and no timelockauditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: highBroken core feature or exploitable abuse vectorBroken core feature or exploitable abuse vectorThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1094 In Favourorg/Stellar-forge;🟠 JWT signature comparison is not constant-time
apiServerless API under api/Serverless API under api/auditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: highBroken core feature or exploitable abuse vectorBroken core feature or exploitable abuse vectorThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1092 In Favourorg/Stellar-forge;🟠 One
VITE_FACTORY_CONTRACT_IDshared across the network switcher — mainnet/testnet toggle points both networks at the same contractauditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: highBroken core feature or exploitable abuse vectorBroken core feature or exploitable abuse vectorThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1016 In Favourorg/Stellar-forge;🟠
scValToStringrenders contract addresses as raw hex, not StrKey — per-token history and explorer links are brokenauditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: highBroken core feature or exploitable abuse vectorBroken core feature or exploitable abuse vectorThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1015 In Favourorg/Stellar-forge;🟡 No permissionless TTL keep-alive path or archived-entry recovery procedure
auditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditdocumentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: elevatedCorrectness/robustness gap with user-visible impactCorrectness/robustness gap with user-visible impactThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#1011 In Favourorg/Stellar-forge;✅ [Fixed] No off-chain event indexer — every page load re-derives state from raw RPC calls
apiServerless API under api/Serverless API under api/auditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditbugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: criticalFunds/consensus/permanent-brick riskFunds/consensus/permanent-brick riskThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#943 In Favourorg/Stellar-forge;✅ [Fixed]
transfer_adminandupdate_adminare duplicate entrypoints with inconsistent event emissionauditFrom the ISSUES.md codebase auditFrom the ISSUES.md codebase auditbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26severity: criticalFunds/consensus/permanent-brick riskFunds/consensus/permanent-brick riskThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#916 In Favourorg/Stellar-forge;