Issues

• Replace String::from_str(env, &format!(...)) ID generation with a single allocation strategy

  intermediaterefactor
  LintError/orionpay-contract#142 · Filter by author memplethee-lab opened on Oct 10, 2026

• Document SECURITY.md's vulnerability classes with per-class code location and status

  intermediatesecurity
  LintError/orionpay-contract#141 · Filter by author memplethee-lab opened on Oct 10, 2026

• Plain-language onboarding page for contributors new to Soroban and Stellar

  accessibilityintermediate
  LintError/orionpay-contract#140 · Filter by author memplethee-lab opened on Oct 10, 2026

• README table of contents and anchor navigation

  accessibilitygood-first-issue
  LintError/orionpay-contract#139 · Filter by author memplethee-lab opened on Oct 10, 2026

• Add a CHANGELOG.md with Keep a Changelog format for release notes

  good-first-issuetooling
  LintError/orionpay-contract#138 · Filter by author memplethee-lab opened on Oct 10, 2026
  1

• Add a code-coverage report to CI so test gaps are visible

  intermediatetooling
  LintError/orionpay-contract#137 · Filter by author memplethee-lab opened on Oct 10, 2026

• Add Dependabot config for Cargo and GitHub Actions dependencies

  good-first-issuetooling
  LintError/orionpay-contract#136 · Filter by author memplethee-lab opened on Oct 10, 2026

• Add a rust-toolchain.toml and document an MSRV so builds are reproducible

  good-first-issuetooling
  LintError/orionpay-contract#135 · Filter by author memplethee-lab opened on Oct 10, 2026

• No documented key-derivation or asset-allowlist policy, despite asset codes flowing into storage keys

  advancedgood-first-issuesecurity
  LintError/orionpay-contract#134 · Filter by author ykargeee-bit opened on Oct 9, 2026

• No fuzzing or property tests for the percentage-sum and amount arithmetic

  intermediatetesting
  LintError/orionpay-contract#132 · Filter by author ykargeee-bit opened on Oct 9, 2026
  2

• cargo audit / cargo deny supply-chain scanning is missing from CI

  intermediatesecuritytooling
  LintError/orionpay-contract#131 · Filter by author ykargeee-bit opened on Oct 9, 2026

• Add #[forbid(unsafe_code)] so unsafe is added only deliberately

  good-first-issuesecurity
  LintError/orionpay-contract#130 · Filter by author ykargeee-bit opened on Oct 9, 2026

• create_bulk_payment does not validate recipient_index inputs for future storage-key collisions

  bugintermediatesecurity
  LintError/orionpay-contract#129 · Filter by author ykargeee-bit opened on Oct 9, 2026

• No SECURITY.md threat model mapping to the code — the checklist lists classes with no traceability

  intermediatesecurity
  LintError/orionpay-contract#128 · Filter by author ykargeee-bit opened on Oct 9, 2026

• TOTP-style settlement race: process_recipient can be called concurrently to the same index

  bugintermediatesecurity
  LintError/orionpay-contract#127 · Filter by author ykargeee-bit opened on Oct 9, 2026

• No require_auth on split or bulk creation — anyone can create payments as any sender

  bugintermediatesecurity
  LintError/orionpay-contract#126 · Filter by author ykargeee-bit opened on Oct 9, 2026

• No instructions for how a newcomer runs a single test while iterating

  accessibilitygood-first-issue
  LintError/orionpay-contract#125 · Filter by author ykargeee-bit opened on Oct 9, 2026

• Contract naming is inconsistent across the three modules, hurting discoverability

  accessibilityintermediate
  LintError/orionpay-contract#124 · Filter by author ykargeee-bit opened on Oct 9, 2026

• Version strings are duplicated in three places and drift from Cargo.toml

  accessibilitygood-first-issue
  LintError/orionpay-contract#122 · Filter by author ykargeee-bit opened on Oct 9, 2026

• No issue templates for a task or help wanted workflow

  accessibilitygood-first-issue
  LintError/orionpay-contract#120 · Filter by author ykargeee-bit opened on Oct 9, 2026

• No getting started path: the README jumps from intro to structure with no walkthrough

  accessibilitygood-first-issue
  LintError/orionpay-contract#118 · Filter by author ykargeee-bit opened on Oct 9, 2026

• Error codes are bare numbers with no names for humans reading a failed transaction

  accessibilityintermediate
  LintError/orionpay-contract#117 · Filter by author ykargeee-bit opened on Oct 9, 2026

• No runnable examples — README and issues have nothing a newcomer can execute

  accessibilitygood-first-issue
  LintError/orionpay-contract#116 · Filter by author ykargeee-bit opened on Oct 9, 2026

• Add a bulk-payment index so process_recipient need not read the whole vector

  advancedperformance
  LintError/orionpay-contract#109 · Filter by author ykargeee-bit opened on Oct 9, 2026

• Compile to wasm32v1-none with -C link-arg=--strip-all to shrink the deployed artifact

  good-first-issueperformance
  LintError/orionpay-contract#108 · Filter by author ykargeee-bit opened on Oct 9, 2026