-
Notifications
You must be signed in to change notification settings - Fork 82
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
get_network_health-equivalent / RPC endpoint config — confirmsrc/config/networks.rs's hardcoded RPC/Horizon URLs have a fallback or health check, given this exact class of staleness already caused a cross-repo bug this cyclebugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#423 In Bonizozo/stellar-tipjar-contracts;TipVerifyRequest-equivalent on the contract side — confirmtip()'ssenderparameter can't be spoofed relative to the actual transaction signer in a way the backend's off-chain verification (which trustssource_account) wouldn't catchdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity hardening or vulnerability workSecurity hardening or vulnerability workThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#422 In Bonizozo/stellar-tipjar-contracts;tests/integration/tip_flow_test.rs— confirm thetests/integrationworkspace member (a genuinely wired-up package, unlike the root tree) actually exercises the realcontracts/tipjarend-to-end, including multi-token and fee pathsdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#420 In Bonizozo/stellar-tipjar-contracts;Confirm
security.yml/contract-ci.ymlwould catch an entire package silently dropping out of the workspace build graph (the rootsrc/teststree's failure mode found in this audit)ci/cdContinuous integration and deliveryContinuous integration and deliverydifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#418 In Bonizozo/stellar-tipjar-contracts;Errorenum numeric discriminants — confirm append-only, never-renumbered discipline for external consumers that pattern-match on the raw codearchitectureStructural or architectural changeStructural or architectural changebugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#416 In Bonizozo/stellar-tipjar-contracts;PendingAdmin'saccept_admin— confirm there's no timeout on a pending admin-transfer proposal (an old, forgotten proposal could be accepted years later by a now-compromised or reassigned address)difficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity hardening or vulnerability workSecurity hardening or vulnerability workThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#413 In Bonizozo/stellar-tipjar-contracts;deploy.yml/deploy-testnet.yml— confirm the deployment pipeline verifies the deployed WASM hash matches what was actually reviewed/merged, not just "whatevercargo buildproduces at deploy time"ci/cdContinuous integration and deliveryContinuous integration and deliverydifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardsecuritySecurity hardening or vulnerability workSecurity hardening or vulnerability workThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#412 In Bonizozo/stellar-tipjar-contracts;examples/simulate_tip.rs— confirm it stays runnable/current as a smoke test, not stale example code that silently bit-rotsdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortdocumentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#410 In Bonizozo/stellar-tipjar-contracts;ttl_tests.rs— confirm TTL/archival recovery is tested for *every* persistent key type, not just the ones exercised by the original feature PR that introduced this test filedifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#409 In Bonizozo/stellar-tipjar-contracts;contracts/tipjar/src/test_multitoken.rs— confirm cross-token isolation is explicitly tested (a bug in one token's accounting shouldn't be able to affect another's)difficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtestingTest coverage, fuzzing, property testingTest coverage, fuzzing, property testingThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#408 In Bonizozo/stellar-tipjar-contracts;MuxedAddress::from(payout_address)inwithdraw/withdraw_fees— confirm muxed-account semantics are handled correctly for payout addresses that are themselves already muxedbugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#405 In Bonizozo/stellar-tipjar-contracts;Cargo.toml's[profile.release](opt-level = "z",lto = true,panic = "abort") — confirmpanic = "abort"is compatible with Soroban's error-handling model across every crate in this large workspace, not just the tip jar contractarchitectureStructural or architectural changeStructural or architectural changebugSomething isn't workingSomething isn't workingdifficulty: very hardRequires deep expertise and substantial effortRequires deep expertise and substantial effortGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#404 In Bonizozo/stellar-tipjar-contracts;