Search results

test: share token contract has zero test coverage — transfer, allowance, and edge case behaviors are unverified

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

help wantedExtra attention is neededExtra attention is needed

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P2: MediumMedium priority — notable issue, no immediate crisisMedium priority — notable issue, no immediate crisis

smart-contractSoroban/Rust contract workSoroban/Rust contract work

testingTest coverage and qualityTest coverage and quality

Status: Open.

#578 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: invoice contract daily rate limiter resets on ledger timestamp — manipulation possible at UTC midnight boundary

bugSomething isn't workingSomething isn't working

P2: MediumMedium priority — notable issue, no immediate crisisMedium priority — notable issue, no immediate crisis

securitySecurity improvementsSecurity improvements

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#577 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: SEP-10 JWT never refreshed in long-lived sessions — stale tokens cause silent transaction failures

bugSomething isn't workingSomething isn't working

frontendNext.js frontend workNext.js frontend work

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P2: MediumMedium priority — notable issue, no immediate crisisMedium priority — notable issue, no immediate crisis

securitySecurity improvementsSecurity improvements

Status: Open.

#576 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: SSRF vulnerability in webhook test endpoint — server makes unvalidated requests to arbitrary URLs

bugSomething isn't workingSomething isn't working

frontendNext.js frontend workNext.js frontend work

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P0: CriticalMust fix immediately — security or data loss riskMust fix immediately — security or data loss risk

securitySecurity improvementsSecurity improvements

Status: Open.

#575 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: withdrawal queue has no max-wait guarantee — late depositors starve under sustained high pool utilization

bugSomething isn't workingSomething isn't working

enhancementNew feature or requestNew feature or request

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P1: HighHigh priority — significant impact on correctnessHigh priority — significant impact on correctness

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#574 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: credit score version not bumped on scoring config change — stale scores appear current

bugSomething isn't workingSomething isn't working

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P2: MediumMedium priority — notable issue, no immediate crisisMedium priority — notable issue, no immediate crisis

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#573 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: invoice due date extension allows pending_extension_date before current due_date — triggers immediate default

bugSomething isn't workingSomething isn't working

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P1: HighHigh priority — significant impact on correctnessHigh priority — significant impact on correctness

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#572 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: cleanup_expired_storage() has no cursor — cannot systematically clear large backlogs

bugSomething isn't workingSomething isn't working

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P2: MediumMedium priority — notable issue, no immediate crisisMedium priority — notable issue, no immediate crisis

performanceRuntime or storage efficiency concernRuntime or storage efficiency concern

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#571 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: persistent debtor record storage is unbounded — invoice spam with unique debtors exhausts ledger entry budget

bugSomething isn't workingSomething isn't working

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P1: HighHigh priority — significant impact on correctnessHigh priority — significant impact on correctness

performanceRuntime or storage efficiency concernRuntime or storage efficiency concern

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#570 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: governance quorum uses live total supply — admin minting just before vote close suppresses legitimate proposals

bugSomething isn't workingSomething isn't working

P1: HighHigh priority — significant impact on correctnessHigh priority — significant impact on correctness

securitySecurity improvementsSecurity improvements

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#569 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: credit score milestone bonuses exploitable via micro-invoice cycling

bugSomething isn't workingSomething isn't working

GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSS

Maybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox reward

Official CampaignCampaign: Official CampaignCampaign: Official Campaign

P1: HighHigh priority — significant impact on correctnessHigh priority — significant impact on correctness

securitySecurity improvementsSecurity improvements

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#568 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026

fix: pool remove_token() does not check active co-funding commitments — strands investor capital

bugSomething isn't workingSomething isn't working

P1: HighHigh priority — significant impact on correctnessHigh priority — significant impact on correctness

smart-contractSoroban/Rust contract workSoroban/Rust contract work

Status: Open.

#567 In astera-hq/Astera;

· sanmipaul opened on Jun 16, 2026