Issues

• ⚠️ [MEDIUM] Missing Expiry Timestamp in Off-Chain EIP-712 Meta-Transaction Payloads

  cryptographymedium-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1253 · Filter by author Sadeequ opened on Oct 8, 2026
  5

  

• 🐛 [HIGH] Incomplete Liquidity Removal Mechanics in AMM Edge Cases

  defihigh-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1252 · Filter by author Sadeequ opened on Oct 8, 2026
  2

  

• ⚡ [GAS] Optimize Storage Layout for Compact Struct Packing in Position Tracker

  gas-optimizationgood-first-issueStellar Wave
  StellarFlow-Network/stellarflow-contracts#1251 · Filter by author Sadeequ opened on Oct 8, 2026
  6

  

• 🛑 [MEDIUM] Inconsistent Emergency Pause Execution Scope Across Multi-Vault System

  access-controlmedium-priority
  StellarFlow-Network/stellarflow-contracts#1250 · Filter by author Sadeequ opened on Oct 8, 2026

• 🐛 [CRITICAL] Unchecked Cast From uint256 to uint128 Causes Downcasting Overflows

  criticalsecurityStellar Wavetype-casting
  StellarFlow-Network/stellarflow-contracts#1249 · Filter by author Sadeequ opened on Oct 8, 2026
  5

  

• ⚠️ [HIGH] Lack of Sanity Checks on Protocol Fee Distribution Ratios

  high-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1248 · Filter by author Sadeequ opened on Oct 8, 2026
  2

• 🐛 [MEDIUM] First Depositor Inflation Vulnerability in ERC-4626 Vault

  erc4626medium-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1247 · Filter by author Sadeequ opened on Oct 8, 2026
  3

  

• ⚡ [GAS] Standardize Revert Error Declarations to Save Deployment Gas

  gas-optimizationgood-first-issue
  StellarFlow-Network/stellarflow-contracts#1246 · Filter by author Sadeequ opened on Oct 8, 2026

• 🔒 [HIGH] Insecure Dynamic Array Resizing In Emergency Withdrawal Routines

  high-prioritysecurityStellar Wavestorage
  StellarFlow-Network/stellarflow-contracts#1245 · Filter by author Sadeequ opened on Oct 8, 2026
  3

  

• 🐛 [HIGH] Missing Revocation Logic in Delegated Voting Power Assignments

  governancehigh-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1244 · Filter by author Sadeequ opened on Oct 8, 2026
  5

  

• ⚠️ [LOW] Missing Event Emission on Critical State Parameter Updates

  code-qualitygood-first-issue
  StellarFlow-Network/stellarflow-contracts#1243 · Filter by author Sadeequ opened on Oct 8, 2026

• 🐛 [MEDIUM] Missing Reentrancy Protection on Dynamic ERC-721 Minting Callbacks

  medium-prioritynftsecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1242 · Filter by author Sadeequ opened on Oct 8, 2026
  4

  

• ⚡ [GAS] Optimize Block Timestamp Read Operations in Hot Loops

  gas-optimizationgood-first-issue
  StellarFlow-Network/stellarflow-contracts#1241 · Filter by author Sadeequ opened on Oct 8, 2026

• 🛑 [HIGH] Hardcoded Decimal Assumption in Chainlink Price Ratio Logic

  high-priorityoraclesecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1240 · Filter by author Sadeequ opened on Oct 8, 2026
  2

  

• 🐛 [MEDIUM] Timelock Delay Reduction Bypasses Governance Delay Guarantees

  governancemedium-prioritysecurity
  StellarFlow-Network/stellarflow-contracts#1239 · Filter by author Sadeequ opened on Oct 8, 2026

• ⚡ [GAS] Mark State Variables as immutable in AccessController.sol

  gas-optimizationgood-first-issueStellar Wave
  StellarFlow-Network/stellarflow-contracts#1238 · Filter by author Sadeequ opened on Oct 8, 2026
  3

  

• ⚠️ [MEDIUM] Unused Initializer Variable in Diamond Proxy Facet Constructor

  architecturemedium-priorityproxyStellar Wave
  StellarFlow-Network/stellarflow-contracts#1237 · Filter by author Sadeequ opened on Oct 8, 2026
  3

  

• ⚡ [GAS] Use Custom Errors Instead of Require String Messages Across Governance Core

  gas-optimizationgood-first-issueStellar Wave
  StellarFlow-Network/stellarflow-contracts#1235 · Filter by author Sadeequ opened on Oct 8, 2026
  2

  

• 🐛 [CRITICAL] Loss of Unclaimed Rewards on User Stake Withdrawal in RewardPool.sol

  criticalrewardssecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1234 · Filter by author Sadeequ opened on Oct 8, 2026
  7

  

• 🔒 [HIGH] Invariant Violation in Pool Balance Accounting After Fee On Transfer

  erc20high-prioritysecurity
  StellarFlow-Network/stellarflow-contracts#1233 · Filter by author Sadeequ opened on Oct 8, 2026

• ⚠️ [MEDIUM] Missing Transfer Gas Overhead Limit in Push-Based ETH Refunds

  dosmedium-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1232 · Filter by author Sadeequ opened on Oct 8, 2026
  3

  

• 🛑 [HIGH] Missing Threshold Limit for Minimum Borrowing Amount in LendingVault.sol

  defihigh-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1231 · Filter by author Sadeequ opened on Oct 8, 2026
  5

  

• 🐛 [MEDIUM] Unbounded Array Iteration in Flash Loan Callback Tracking

  gas-limitmedium-prioritysecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1230 · Filter by author Sadeequ opened on Oct 8, 2026
  3

  

• ⚡ [GAS] Optimize Mapping Lookups via Storage Pointer References in StakingRewards.sol

  gas-optimizationgood-first-issue
  StellarFlow-Network/stellarflow-contracts#1229 · Filter by author Sadeequ opened on Oct 8, 2026

• 🔒 [HIGH] Incomplete Liquidation Debt Settlement in MarginEngine.sol

  high-priorityrisk-enginesecurityStellar Wave
  StellarFlow-Network/stellarflow-contracts#1227 · Filter by author Sadeequ opened on Oct 8, 2026
  3