Log in
Sadeequ
22900
All-time points
View user on GitHub
Share
Linked accounts
assofsaints7.
Org Memberships
1
StellarFlow-Network
Resolved Issues
88
Closed
200 Points
#12
The wallet service uses `horizonclient.DefaultTestNetClient` (hardcoded testnet) in `wallet/service.go:53`, ignoring the `horizon_url` configured in `config.yaml`. The backend cannot connect to Stellar mainnet regardless of configuration.
cocor-tech/moistello-backend
Closed
200 Points
#6
The registration endpoint returns the OTP code in plaintext in the response body when `environment: development`. The current `config.yaml` has `environment: development`. This allows trivial OTP bypass.
cocor-tech/moistello-backend
Closed
200 Points
#7
The WebSocket endpoint `/ws` is registered outside the authenticated route group in `router.go:43`. It has no JWT middleware, no token blocklist check, and no CSRF validation. The handler falls back to `"anonymous"` when no userID is in context. Anyone can connect and listen to real-time events.
cocor-tech/moistello-backend
Closed
200 Points
#1
The Stellar master secret key is hardcoded in `config.yaml:38` (`master_secret_key: "SDDBM2MKQSV2ZPEDKTSI3IWNEUSJU5DAWW5NSRWNKJ4FABXSYGYW72FO"`) and committed to version control. This key controls the master pool that funds ALL user wallets.
cocor-tech/moistello-backend
Closed
200 Points
#209
[Low] test(invoice): negative auth test: non-issuer cannot call list_for_financing
TrusTrove/TrusTrove-contract
Closed
200 Points
#191
[High] test(invoice): add end-to-end coverage for repay() path
TrusTrove/TrusTrove-contract
Closed
200 Points
#186
[Medium] test(registry): test revoked address cannot be re-registered
TrusTrove/TrusTrove-contract
Closed
200 Points
#185
[Medium] test(registry): negative auth test for revoke
TrusTrove/TrusTrove-contract
Closed
300 Points
#479
performance: update profiles.total_donated_xlm asynchronously after donation instead of in critical path
Emmy123222/Stellar-GreenPay
Closed
300 Points
#469
security: add Content-Security-Policy header to all API responses
Emmy123222/Stellar-GreenPay
Closed
300 Points
#464
devops: add Gitleaks pre-commit hook step to CI (secret scanning is configured but not enforced)
Emmy123222/Stellar-GreenPay
Closed
300 Points
#462
devops: add helm lint check in CI for Helm chart validation
Emmy123222/Stellar-GreenPay
Closed
200 Points
#559
Build Community Moderation Dashboard
MentoNest/skillsync_frontend
Closed
200 Points
#558
Implement Report Discussion Feature
MentoNest/skillsync_frontend
Closed
200 Points
#557
Implement Share Discussion Feature
MentoNest/skillsync_frontend
Closed
200 Points
#556
Implement Follow Users Feature
MentoNest/skillsync_frontend
Closed
200 Points
#32
risk-pool.rs: LP deposit share calculation vulnerable to MEV/sandwich
Parashield-Protocol/parashield-contracts
Closed
200 Points
#31
policy-engine.rs: policy ID scanning O(n) — inefficient user policy lookup
Parashield-Protocol/parashield-contracts
Closed
200 Points
#30
all contracts: single-step admin transfer — no way to safely handoff or recover from lost key
Parashield-Protocol/parashield-contracts
Closed
200 Points
#29
policy-engine.rs: premium calculation precision not documented — backend/contract mismatch possible
Parashield-Protocol/parashield-contracts
Closed
200 Points
#225
Add admin analytics dashboard endpoint
BlockDash-Studios/RustAcademy
Closed
200 Points
#222
Add user settings endpoint
BlockDash-Studios/RustAcademy
Closed
200 Points
#409
[LLM] Implement multi-language support for LLM outputs
Traqora/astroml
Closed
200 Points
#408
[LLM] Build predictive alerts for account behavior changes
Traqora/astroml
Closed
200 Points
#405
[LLM] Build CI/CD pipeline for LLM features
Traqora/astroml
Closed
200 Points
#404
[LLM] Implement health checks for LLM infrastructure
Traqora/astroml
Closed
200 Points
#174
Add weekly challenge endpoint
BlockDash-Studios/RustAcademy
Closed
200 Points
#170
Add daily streak tracker
BlockDash-Studios/RustAcademy
Closed
200 Points
#68
Race condition in stats cache locking with TOCTOU gap
TrusTrove/TrusTrove-app
Closed
200 Points
#67
Dashboard and landing page display hardcoded mock stats as real on-chain data
TrusTrove/TrusTrove-app
Closed
200 Points
#66
Repay button shown before delivery is confirmed
TrusTrove/TrusTrove-app
Closed
200 Points
#65
confirmDeliveryMutation passes connected wallet address as buyer confirmer instead of invoice buyer
TrusTrove/TrusTrove-app
Closed
200 Points
#452
Implement Soroban Asset Metadata Cache
MDTechLabs/BridgeWise
Closed
200 Points
#451
Implement Stellar Route Availability Scanner
MDTechLabs/BridgeWise
Closed
200 Points
#450
Implement Soroban Bridge Event Indexer
MDTechLabs/BridgeWise
Closed
200 Points
#481
Implement Soroban Analysis Artifact Storage
MDTechLabs/GasGuard
Closed
200 Points
#381
Add anomaly model threshold-tuning regression tests with synthetic revenue fixtures
Veritasor/Veritasor-Backend
Closed
200 Points
#225
: [Infra] Configure Redis persistent storage (AOF/RDB)
ANYTECHS/clips-backend
Closed
200 Points
#224
[Queue] Add job completion notification to user
ANYTECHS/clips-backend
Closed
200 Points
#223
[Infra] Add BullMQ queue health check endpoint
ANYTECHS/clips-backend
Closed
200 Points
#222
[Queue] Implement dead letter queue for permanently failed jobs
ANYTECHS/clips-backend
Closed
200 Points
#537
[CT-05] Build MultiPartyVerificationService
CodeGirlsInc/SMALDA
Closed
200 Points
#536
[CT-04] Build DocumentExpiryService
CodeGirlsInc/SMALDA
Closed
200 Points
#535
[CT-03] Register GET /transfer/:document_hash route
CodeGirlsInc/SMALDA
Closed
200 Points
#534
[CT-02] Implement revoke_document handler
CodeGirlsInc/SMALDA
Closed
200 Points
#612
[bug] anomaly-detector: PERSISTENT TTL 34_560/259_200 (~2 days/~15 days) — anomaly reports and baselines expire in ~15 days
ThinkLikeAFounder/pulsartrack
Closed
200 Points
#611
[bug] audience-segments: remove_member decrements MemberCount even when member does not exist
ThinkLikeAFounder/pulsartrack
Closed
200 Points
#610
[bug] governance-core: update_params accepts zero values — quorum_pct=0, pass_threshold_pct=0, voting_period_ledgers=0 silently break governance
ThinkLikeAFounder/pulsartrack
Closed
200 Points
#609
[bug] governance-core: PERSISTENT TTL 34_560/259_200 (~2 days/~15 days) — role grants silently expire without revocation
ThinkLikeAFounder/pulsartrack
Closed
200 Points
#511
Admin dashboard API
MentoNest/SkillSync_Server