-
Notifications
You must be signed in to change notification settings - Fork 52
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Detector: Approval race (approve without zero-first) for SEP-41
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedetectorNew or improved static-analysis detectorNew or improved static-analysis detectordifficulty: hardComplex, ~1-2 weeksComplex, ~1-2 weeksGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardSecuritySecurity hardeningSecurity hardeningtype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#806 In Centurylong/sanctifier;Detector: Integer info-loss in event data casts
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedetectorNew or improved static-analysis detectorNew or improved static-analysis detectordifficulty: beginnerGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsdifficulty: easyGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardobservabilityLogs, metrics, tracing, monitoringLogs, metrics, tracing, monitoringtype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#804 In Centurylong/sanctifier;Detector: Missing pause check in value-gating view used off-chain
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedetectorNew or improved static-analysis detectorNew or improved static-analysis detectordifficulty: hardComplex, ~1-2 weeksComplex, ~1-2 weeksGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtype: featureNew capability or enhancementNew capability or enhancementtype: researchInvestigation or design spikeInvestigation or design spikeStatus: Open.#802 In Centurylong/sanctifier;Detector: Storage key reused with different value types
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedetectorNew or improved static-analysis detectorNew or improved static-analysis detectordifficulty: mediumRequires domain knowledge, ~1-3 daysRequires domain knowledge, ~1-3 daysGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardtype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#794 In Centurylong/sanctifier;Detector: Reentrancy via env.invoke_contract before effects
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedetectorNew or improved static-analysis detectorNew or improved static-analysis detectordifficulty: hardComplex, ~1-2 weeksComplex, ~1-2 weeksGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardSecuritySecurity hardeningSecurity hardeningtype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#793 In Centurylong/sanctifier;Detector: Admin/config change without a corresponding event
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedetectorNew or improved static-analysis detectorNew or improved static-analysis detectordifficulty: beginnerGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsdifficulty: easyGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardobservabilityLogs, metrics, tracing, monitoringLogs, metrics, tracing, monitoringtype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#789 In Centurylong/sanctifier;Adopters showcase + real findings gallery
area: docsDocumentation and guidesDocumentation and guidesdifficulty: beginnerGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsdifficulty: easyGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority: mediumMedium impact, upcoming sprintMedium impact, upcoming sprinttype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#773 In Centurylong/sanctifier;Snapshot-review tooling to make detector changes easy to audit
area: testingTests, benchmarks, fuzzingTests, benchmarks, fuzzingdifficulty: mediumRequires domain knowledge, ~1-3 daysRequires domain knowledge, ~1-3 daysdxDeveloper experienceDeveloper experienceGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority: mediumMedium impact, upcoming sprintMedium impact, upcoming sprinttype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#761 In Centurylong/sanctifier;Inline suppression audit report (who suppressed what + why)
area: clisanctifier-cli command line toolsanctifier-cli command line toolarea: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedifficulty: beginnerGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsdifficulty: easyGood first issue, ~1-4 hrsGood first issue, ~1-4 hrsGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority: lowNice to haveNice to haveThird CampaignCampaign: Third CampaignCampaign: Third Campaigntype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#729 In Centurylong/sanctifier;Rule-testing framework for detector authors
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginearea: testingTests, benchmarks, fuzzingTests, benchmarks, fuzzingdifficulty: mediumRequires domain knowledge, ~1-3 daysRequires domain knowledge, ~1-3 daysGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority: mediumMedium impact, upcoming sprintMedium impact, upcoming sprintThird CampaignCampaign: Third CampaignCampaign: Third Campaigntype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#728 In Centurylong/sanctifier;Community rule registry + contribution guide
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedifficulty: mediumRequires domain knowledge, ~1-3 daysRequires domain knowledge, ~1-3 daysdocumentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority: lowNice to haveNice to haveThird CampaignCampaign: Third CampaignCampaign: Third Campaigntype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#727 In Centurylong/sanctifier;Rule packs / presets (strict, recommended, minimal)
area: core-enginesanctifier-core static analysis enginesanctifier-core static analysis enginedifficulty: mediumRequires domain knowledge, ~1-3 daysRequires domain knowledge, ~1-3 daysGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardpriority: mediumMedium impact, upcoming sprintMedium impact, upcoming sprintThird CampaignCampaign: Third CampaignCampaign: Third Campaigntype: featureNew capability or enhancementNew capability or enhancementStatus: Open.#726 In Centurylong/sanctifier;