-
Notifications
You must be signed in to change notification settings - Fork 66
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
feat(checks): add ttl-duration-provenance check — extend_ttl's duration argument is traced back through prior bindings and helper calls to check whether it's ever capped away from an attacker-controlled source
enhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShelp wantedExtra attention is neededExtra attention is neededMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26rustPull requests that update rust codePull requests that update rust codeStatus: Open.#425 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add multisig-duplicate-signer check — a loop over a Vec<Address> of signers increments an approval counter without deduplicating, letting one signer count multiple times toward quorum
enhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShelp wantedExtra attention is neededExtra attention is neededMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26rustPull requests that update rust codePull requests that update rust codeStatus: Open.#424 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add reentrancy-guard-leak check — a storage-backed lock flag is set before an external call but the matching unlock is missing on some early-exit paths
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#418 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add require-auth-for-args-mismatch check — the tuple passed to require_auth_for_args doesn't match the values actually used in the sensitive operation that follows
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#417 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add narrowing-cast-taint check — an i128 arithmetic result is narrowed to a smaller type several statements or branches later with no checked/range guard anywhere on the def-use chain
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#413 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add loop-bound-provenance check — trace a for/while loop's bound expression back through prior bindings and helper calls to find whether a cap exists anywhere along the chain
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#412 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add stale-auth-binding check — require_auth() is called on a binding that gets reassigned/shadowed before the sensitive operation actually runs
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#411 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add struct-field-drift check — a #[contracttype] struct gained a field, and some construction sites in the file still build it without one
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#410 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add event-schema-drift check — the same event name is published with a different topic/argument shape at different call sites
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#409 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add collection-add-without-remove check — a storage-backed collection is appended to somewhere in the file but never has a matching removal anywhere
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#408 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add hash-argument-order-mismatch check — two call sites hash the same fields in a different order, breaking a commit/reveal pair
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#407 In Veritas-Vaults-Network/Soroban-Guard-Core;feat(checks): add symbol-short-collision check — decode symbol_short!/Symbol::short's actual bit-packing and find two different source strings that encode to the same value
enhancementNew feature or requestNew feature or requesthelp wantedExtra attention is neededExtra attention is neededrustPull requests that update rust codePull requests that update rust codeStatus: Open.#406 In Veritas-Vaults-Network/Soroban-Guard-Core;