Issues

• native coin issuance policy and rejection of unsupported token types before the tge

  unicity-sphere/sphere-sdk#832 · Filter by author lploom opened on Sep 30, 2026
  1

• ConnectClient.connect() called twice leaks a listener and double-dispatches every wallet event

  unicity-sphere/sphere-sdk#829 · Filter by author KruGoL opened on Sep 29, 2026

• security: waitForHostReady accepts HOST_READY from any window and any origin

  unicity-sphere/sphere-sdk#828 · Filter by author KruGoL opened on Sep 29, 2026

• Follow-ups to #801/#808: the derivation path is unvalidated, a replace is not atomic, load() still fails open

  bug
  unicity-sphere/sphere-sdk#812 · Filter by author KruGoL opened on Sep 21, 2026

• Connect WebSocket host: a new socket inherits the previous client's session without a handshake

  bug
  unicity-sphere/sphere-sdk#807 · Filter by author KruGoL opened on Sep 18, 2026

• requests.pay(): the request-to-transfer link is not durable during the send, so a paid request can become payable again

  bug
  unicity-sphere/sphere-sdk#806 · Filter by author KruGoL opened on Sep 18, 2026

• ./impl/browser ships no type declarations (TS7016 for every browser consumer)

  bug
  unicity-sphere/sphere-sdk#804 · Filter by author KruGoL opened on Sep 18, 2026

• Seed at rest: plaintext without a password, and MD5 single-iteration key derivation with one

  bug
  unicity-sphere/sphere-sdk#803 · Filter by author KruGoL opened on Sep 18, 2026

• importFromJSON / importFromLegacyFile store the restored seed in plaintext even when a password is given

  bug
  unicity-sphere/sphere-sdk#802 · Filter by author KruGoL opened on Sep 18, 2026

• After the Connect packaging release: bump consumers, drop the ConnectClient casts, close the #789 follow-ups

  unicity-sphere/sphere-sdk#792 · Filter by author KruGoL opened on Sep 17, 2026
  3

• Proposal: NFT metadata format for coinless tokens (CBOR tags 39052–39055)

  enhancement
  unicity-sphere/sphere-sdk#785 · Filter by author MastaP opened on Sep 14, 2026
  3

  

• fix(payments-v2): a batch deposit refused RATE_LIMITED falls back to N per-blob requests — the amplification the ackBatch rule forbids

  unicity-sphere/sphere-sdk#784 · Filter by author MastaP opened on Sep 13, 2026

• Connect: the wallet's network is checked only at the handshake — the live-rebind path skipped it entirely

  unicity-sphere/sphere-sdk#774 · Filter by author MastaP opened on Sep 3, 2026

• Two FileStorageProvider objects on one dataDir clobber the entire wallet file, money journals included

  bug
  unicity-sphere/sphere-sdk#771 · Filter by author MastaP opened on Sep 2, 2026
  1

• Background work outlives its owner's teardown — five confirmed sites, one missing primitive

  bug
  unicity-sphere/sphere-sdk#770 · Filter by author MastaP opened on Sep 2, 2026
  2

• checkNetworkHealth reports healthy gateways as unhealthy; Sphere.init drops verification/debug; three docs claims the code does not honour

  bug
  unicity-sphere/sphere-sdk#769 · Filter by author MastaP opened on Sep 2, 2026

• Money-critical: a pending delivery is stranded on intent completion, and a trust-base rotation freezes the fleet

  bug
  unicity-sphere/sphere-sdk#768 · Filter by author MastaP opened on Sep 2, 2026
  2

• Receive: history is written one HTTP call per token, serialized inside the drain — 11.9 s for 54 tokens

  unicity-sphere/sphere-sdk#759 · Filter by author MastaP opened on Aug 25, 2026

• Receive: claims are acked one at a time — 54 sequential round trips per receive

  unicity-sphere/sphere-sdk#757 · Filter by author MastaP opened on Aug 21, 2026

• Identity bindings carry no network: put it on the publish side, then tighten the §5.6 guard to a hard refusal

  enhancement
  unicity-sphere/sphere-sdk#734 · Filter by author MastaP opened on Aug 7, 2026

• Post-flip: cut isNetworkScopedAddressKey — convert the network-isolation guard to pin the pv2: prefix

  unicity-sphere/sphere-sdk#730 · Filter by author MastaP opened on Aug 6, 2026

• Public session-revocation verb: destroy({ revokeSession }) — wallet deletion should revoke the wallet-api session row

  unicity-sphere/sphere-sdk#729 · Filter by author MastaP opened on Aug 6, 2026

• Make the money-path mutation probes a standing check, not a manual ritual

  enhancement
  unicity-sphere/sphere-sdk#725 · Filter by author MastaP opened on Jul 31, 2026

• Token loss: a concurrent load erases a just-claimed incoming token (own-storage custody)

  bug
  unicity-sphere/sphere-sdk#724 · Filter by author MastaP opened on Jul 31, 2026

• Send latency: the tail awaits completeIntent and the history POST, both already best-effort

  enhancement
  unicity-sphere/sphere-sdk#717 · Filter by author MastaP opened on Jul 29, 2026