-
Notifications
You must be signed in to change notification settings - Fork 91
Add contract security review checklist #563
Copy link
Copy link
Open
Labels
GrantFox OSSIssue tracked for GrantFox OSS contributionIssue tracked for GrantFox OSS contributionMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Official GrantFox campaign labelOfficial GrantFox campaign labelcontractSmart contract related workSmart contract related workdocumentationDocumentation workDocumentation workexpertExpert difficultyExpert difficultysecuritySecurity sensitive workSecurity sensitive worksorobanSoroban smart contract workSoroban smart contract work
Description
Activity
Metadata
Metadata
Assignees
Labels
GrantFox OSSIssue tracked for GrantFox OSS contributionIssue tracked for GrantFox OSS contributionMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Official GrantFox campaign labelOfficial GrantFox campaign labelcontractSmart contract related workSmart contract related workdocumentationDocumentation workDocumentation workexpertExpert difficultyExpert difficultysecuritySecurity sensitive workSecurity sensitive worksorobanSoroban smart contract workSoroban smart contract work
Description
Difficulty: Expert
Type: Security
Summary
Add a security review checklist for PocketPay contract changes.
Current Behaviour
Contributors may change contract logic without consistently reviewing authorisation, state invariants, boundary values, and failure behaviour.
Expected Behaviour
The repo should provide a contract-specific security checklist for reviewers and contributors.
Suggested Implementation
Create checklist docs and link from PR template and README.
Files or Areas Likely Affected
Acceptance Criteria
Additional Notes
This raises the standard for contract PRs.