Skip to content

Feature/vesting admin threat model#766

Merged
Baskarayelu merged 4 commits intoQuickLendX:mainfrom
firstJOASH:feature/vesting-admin-threat-model
Apr 1, 2026
Merged

Feature/vesting admin threat model#766
Baskarayelu merged 4 commits intoQuickLendX:mainfrom
firstJOASH:feature/vesting-admin-threat-model

Conversation

@firstJOASH
Copy link
Copy Markdown
Contributor

Closes #727 Vesting admin abuse review and optional beneficiary safeguards

- Add get_vesting_vested to public contract API (was missing from lib.rs)
- Fix release() to return InvalidTimestamp before cliff instead of Ok(0)
- Fix test_immediate_cliff_equals_end to use a valid schedule (cliff < end)
- Add 8 admin boundary tests covering: zero amount, backdated start,
  end<=start, cliff>=end, role transfer, non-beneficiary release,
  pre-cliff error, and nonexistent schedule queries
- Expand docs/contracts/vesting.md with full admin threat model table
- Expand docs/contracts/settlement.md with vesting admin threat model
@drips-wave
Copy link
Copy Markdown

drips-wave bot commented Mar 29, 2026

@firstJOASH Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

firstJOASH and others added 3 commits March 29, 2026 09:35
std is unavailable in wasm32 no_std builds. Replace std::vec::Vec with
a fixed-size stack buffer and std::str::from_utf8 with core::str::from_utf8
in normalize_tag to fix the WASM CI build.
The vesting admin boundary tests and get_vesting_vested API addition
grew the optimised WASM from 217668 B to 241218 B, still within the
256 KiB hard limit. Update all three baseline locations:
- tests/wasm_build_size_budget.rs
- scripts/check-wasm-size.sh
- scripts/wasm-size-baseline.toml
@Baskarayelu Baskarayelu merged commit 38de788 into QuickLendX:main Apr 1, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Vesting admin abuse review and optional beneficiary safeguards

2 participants