-
Notifications
You must be signed in to change notification settings - Fork 15
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
No reproducible-build / supply-chain verification — deployed testnet WASM hash cannot be independently confirmed against published source
documentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#59 In MergeFi/contracts;escrow::extend_deadline: a far-future new_deadline creates false security — persistent TTL is still bumped by a fixed ~29 days, not proportionally
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#56 In MergeFi/contracts;compute_split's O(n²) largest-remainder dust distribution should be O(n log n) — compounds with #8's unbounded recipients
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26performancePerformance/optimization issuePerformance/optimization issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#55 In MergeFi/contracts;milestones: no long-run invariant fuzzing of budget conservation (total_budget == remaining_budget + Σallocations), unlike maintenance-pool's #29
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26testingTesting/QA infrastructureTesting/QA infrastructureThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#54 In MergeFi/contracts;All three contracts: fee_bps is read fresh at payout time, not snapshotted at deposit — #20's mutable-fee design would enable retroactive fee changes
architectureArchitecture/design issueArchitecture/design issueGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#53 In MergeFi/contracts;milestones::allocate: issue_id uniqueness is only enforced within a single milestone_id — the same GitHub issue can be paid out from multiple milestones
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#51 In MergeFi/contracts;All three contracts: no integration tests against a real Soroban network — mock_all_auths() fully bypasses genuine signature verification
architectureArchitecture/design issueArchitecture/design issueGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26testingTesting/QA infrastructureTesting/QA infrastructureThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#50 In MergeFi/contracts;escrow: dead NotExpired/InsufficientBalance error variants suggest a missing defensive balance check in release()/refund()
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26testingTesting/QA infrastructureTesting/QA infrastructureThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#48 In MergeFi/contracts;escrow::release + milestones::release_issue: a single frozen/unauthorized-trustline recipient reverts the ENTIRE team payout, blocking everyone
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#47 In MergeFi/contracts;maintenance-pool::get_deposit returns misleading Error::PoolNotFound for a missing deposit index, not just a missing pool
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#46 In MergeFi/contracts;maintenance-pool::deposit's deposit_count: u32 unchecked increment panics uncatchably at overflow instead of returning a typed Error
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26testingTesting/QA infrastructureTesting/QA infrastructureThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#45 In MergeFi/contracts;maintenance-pool::withdraw's recipient is never validated against the contract's own address — self-payment corrupts the balance invariant without theft
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#44 In MergeFi/contracts;