-
Notifications
You must be signed in to change notification settings - Fork 7
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
[MEDIUM] register_referral doesn't validate that the referrer is registered — unregistered referrers get paid
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardreferralReferral registry contractReferral registry contractsecuritySecurity vulnerabilitySecurity vulnerabilityThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#26 In SPulse-Org/SPulse-Contract;[MEDIUM] upsert_top append path uses < instead of <= for min tracking — equal-points players corrupt the min cache
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShardExtremely difficult to resolveExtremely difficult to resolveleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#25 In SPulse-Org/SPulse-Contract;[LOW] Points are monotonically increasing with no decay or penalty — the leaderboard is a permanent, stale ranking
design-flawArchitectural design flawArchitectural design flawGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#24 In SPulse-Org/SPulse-Contract;[MEDIUM] TopPlayerSlot reverse lookups are not cleaned up on eviction in all paths — orphaned entries and stale ranks
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third Campaignttl-storageTTL / storage lifecycleTTL / storage lifecycleStatus: Open.#22 In SPulse-Org/SPulse-Contract;[MEDIUM] MinPoints/MinSlot are stored in instance storage with no TTL extension — the leaderboard's core cache can expire
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShardExtremely difficult to resolveExtremely difficult to resolveleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third Campaignttl-storageTTL / storage lifecycleTTL / storage lifecycleStatus: Open.#21 In SPulse-Org/SPulse-Contract;[MEDIUM] No way to remove or ban a player from the top list — malicious or fraudulent players persist forever
design-flawArchitectural design flawArchitectural design flawGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#20 In SPulse-Org/SPulse-Contract;[HIGH] reward and add_pts are both callable by the market contract with divergent semantics — double-counting and token-supply divergence
accountingAccounting / fee logicAccounting / fee logicGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShardExtremely difficult to resolveExtremely difficult to resolveleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#18 In SPulse-Org/SPulse-Contract;[MEDIUM] get_rank returns 0 for any player outside the top-50 — misleading and inconsistent with get_top_players
design-flawArchitectural design flawArchitectural design flawGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#17 In SPulse-Org/SPulse-Contract;[HIGH] get_top_players uses O(n²) selection sort with full Vec rebuilds — gas bomb that reverts on real leaderboards
dosDenial of serviceDenial of servicegas-optimizationGas / performanceGas / performanceGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSShardExtremely difficult to resolveExtremely difficult to resolveleaderboardLeaderboard contractLeaderboard contractMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardThird CampaignCampaign: Third CampaignCampaign: Third CampaignunsolvableEffectively unsolvable by localized patchEffectively unsolvable by localized patchStatus: Open.#16 In SPulse-Org/SPulse-Contract;[LOW] MIN_BET is checked on gross, but the staked amount is net — fee-dependent minimum stake inconsistency
accountingAccounting / fee logicAccounting / fee logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardprediction-marketPrediction market contractPrediction market contractThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#15 In SPulse-Org/SPulse-Contract;[MEDIUM] OppositeSideBet permanently locks a user to one side of a market — no hedging, no rebalancing
design-flawArchitectural design flawArchitectural design flawGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardprediction-marketPrediction market contractPrediction market contractThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#14 In SPulse-Org/SPulse-Contract;[MEDIUM] cancel_refund zeroes gross but leaves net intact — inconsistent bet state after refund
accountingAccounting / fee logicAccounting / fee logicbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardprediction-marketPrediction market contractPrediction market contractThird CampaignCampaign: Third CampaignCampaign: Third CampaignStatus: Open.#13 In SPulse-Org/SPulse-Contract;