-
Notifications
You must be signed in to change notification settings - Fork 15
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
No down/rollback migrations exist — migration 010's enum ADD VALUE is not even revertible in Postgres
databaseDatabase/migrationsDatabase/migrationsdevopsDeployment/infraDeployment/infraGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#58 In StellarSend/backend;TransactionListParams.page has no upper bound — (page - 1) * per_page can overflow u32 (panic in debug, silent wraparound in release)
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#57 In StellarSend/backend;register has a check-then-insert email race whose loser gets a 500 instead of 409, unlike batch.rs's unique-violation handling
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#55 In StellarSend/backend;Three declared dependencies (validator, once_cell, base64) are completely unused in the real source tree
backendBackend service logicBackend service logicdevopsDeployment/infraDeployment/infraGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#52 In StellarSend/backend;interval_seconds near i64::MAX panics chrono::Duration::seconds() in SubscriptionService::create and run_due_executions
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#51 In StellarSend/backend;payment_requests.memo has no length validation against Stellar's 28-byte on-chain MEMO_TEXT limit
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#49 In StellarSend/backend;idx_escrows_beneficiary_account and idx_escrows_unlock_due are dead indices — no code lets a beneficiary/arbiter discover their escrows
databaseDatabase/migrationsDatabase/migrationsenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#48 In StellarSend/backend;No minimum bound on subscriptions.interval_seconds lets the keeper drain a payer's on-chain allowance every poll cycle
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#47 In StellarSend/backend;A crash between claiming the batch hash and committing leg rows permanently orphans a batch payment, invisible to reconciliation
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingdatabaseDatabase/migrationsDatabase/migrationsGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#46 In StellarSend/backend;SorobanService::invoke_contract_via_keeper has no sequence-number reservation — concurrent keeper passes race on the shared keeper account
backendBackend service logicBackend service logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#45 In StellarSend/backend;PaymentService (get_quote + execute_send, the primary money-movement path) has zero test coverage
backendBackend service logicBackend service logicGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26testingTest coverage relatedTest coverage relatedThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#44 In StellarSend/backend;middleware/auth.rs (JWT issuance and validation) has zero test coverage despite gating every authenticated endpoint
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity concernSecurity concerntestingTest coverage relatedTest coverage relatedThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult / senior-level bounty issueVery difficult / senior-level bounty issueStatus: Open.#43 In StellarSend/backend;