-
Notifications
You must be signed in to change notification settings - Fork 55
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Bounty/Milestone/MaintenancePool/User list endpoints have no pagination and return the entire table in one unbounded response
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26performancePerformance/optimization issuePerformance/optimization issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#63 In MergeFi/backend;TeamMemberSplit.user uses onDelete: CASCADE, so deleting any team member's account silently desyncs a team's split percentages from 100 and can permanently strand that team's bounty
architectureArchitecture/design issueArchitecture/design issuebugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#58 In MergeFi/backend;Because no money-moving route requires auth, IdempotencyInterceptor buckets every caller under a shared 'anonymous' identity per scope, letting unrelated callers collide on each other's cached responses
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#55 In MergeFi/backend;release() and splitRelease() never check for pre-existing Payment rows, so calling them after releasePartial causes a double payout of the full escrow amount
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#44 In MergeFi/backend;Money-moving DTOs trust client-supplied contributorId/recipientId/funderAddress instead of binding to the authenticated caller
architectureArchitecture/design issueArchitecture/design issueGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#40 In MergeFi/backend;UsersController.setStellarAddress is authenticated but not authorized: any logged-in user can overwrite another user's payout address
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity-related issueSecurity-related issueThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#39 In MergeFi/backend;Docker/deployment tooling is entirely absent: no Dockerfile, no docker-compose for local Postgres, no CI pipeline definition
documentationImprovements or additions to documentationImprovements or additions to documentationenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShelp wantedExtra attention is neededExtra attention is neededMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26very hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#30 In MergeFi/backend;Analytics payout heatmap and top-clients queries likely load unbounded result sets into memory with no pagination
architectureArchitecture/design issueArchitecture/design issueenhancementNew feature or requestNew feature or requestGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26performancePerformance/optimization issuePerformance/optimization issueStellar WaveIssues in the Stellar wave programIssues in the Stellar wave programvery hardVery difficult task, expert-level effort requiredVery difficult task, expert-level effort requiredStatus: Open.#22 In MergeFi/backend;