Issues

• [frontend] - AuthGuard redirects using window.location.href bypassing Next.js router and causing full page reload

  bugfrontendStellar Wave
  arflexx/Airflex#267 · Filter by author dark-sarge opened on Sep 24, 2026
  2

• [frontend] - Wallet page shows XLM balance prefixed with Naira symbol instead of XLM

  bugfrontendStellar Wave
  arflexx/Airflex#266 · Filter by author dark-sarge opened on Sep 24, 2026
  3

• [frontend] - useTrade hook has missing dependency in useEffect causing stale closure bugs

  bugfrontendStellar Wave
  arflexx/Airflex#265 · Filter by author dark-sarge opened on Sep 24, 2026
  2

• [frontend] - Trade detail page has no loading skeleton showing blank screen during data fetch

  frontendStellar Waveux
  arflexx/Airflex#264 · Filter by author dark-sarge opened on Sep 24, 2026
  3

• [backend] - Referral code generation has insufficient entropy for uniqueness at scale

  backendsecurityStellar Wave
  arflexx/Airflex#263 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - POST /api/v1/trades/:id/dispute does not call flag_dispute on escrow contract creating on-chain/off-chain state mismatch

  backendbugStellar Wave
  arflexx/Airflex#262 · Filter by author dark-sarge opened on Sep 24, 2026

• [backend] - Hard-deletion background job for accounts past the 30-day grace window does not exist

  backendbugcomplianceStellar Wave
  arflexx/Airflex#261 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - GET /api/v1/trades does not return seller rating in typed fields causing TradeOffer type mismatch

  backendbugStellar Wave
  arflexx/Airflex#260 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - POST /api/v1/kyc/submit stores NIN in plaintext in the database

  backendsecurityStellar Wave
  arflexx/Airflex#259 · Filter by author dark-sarge opened on Sep 24, 2026
  2

• [backend] - Recovery codes stored as SHA-256 hashes which are brute-forceable for short alphanumeric codes

  backendsecurityStellar Wave
  arflexx/Airflex#258 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - SSE events endpoint has no heartbeat causing clients to timeout behind proxies

  backendbugStellar Wave
  arflexx/Airflex#257 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - GET /api/v1/admin/users computes balance via correlated subquery — O(n) per user

  backendperformanceStellar Wave
  arflexx/Airflex#256 · Filter by author dark-sarge opened on Sep 24, 2026
  3

  

• [backend] - Paystack webhook handler does not verify X-Paystack-Signature header

  backendsecurityStellar Wave
  arflexx/Airflex#255 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - tradeVerification has no dead-letter queue or alerting when all retry attempts fail

  backendbugStellar Wave
  arflexx/Airflex#254 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - Missing composite index on trade_offers(status, expires_at) causes full table scans on homepage query

  backendperformanceStellar Wave
  arflexx/Airflex#253 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [backend] - KYC documents stored on local filesystem — breaks horizontal scaling and lost on container restart

  backendbuginfrastructureStellar Wave
  arflexx/Airflex#248 · Filter by author dark-sarge opened on Sep 24, 2026
  3

  

• [backend] - JWT_SECRET falls back to undefined with non-null assertion instead of failing fast at startup

  backendbugStellar Wave
  arflexx/Airflex#247 · Filter by author dark-sarge opened on Sep 24, 2026
  2

  

• [backend] - POST /api/v1/wallet/withdraw is a stub that always returns success without executing any transfer

  backendbugStellar Wave
  arflexx/Airflex#246 · Filter by author dark-sarge opened on Sep 24, 2026
  3

  

• [backend] - POST /api/v1/trades/:id/buy accepts buyerSecretKey in request body — secret key transmitted over the wire

  backendsecurityStellar Wave
  arflexx/Airflex#245 · Filter by author dark-sarge opened on Sep 24, 2026
  3

  

• [backend] - POST /api/v1/trades passes encrypted seller secret key to createListing without decryption

  backendbugsecurityStellar Wave
  arflexx/Airflex#244 · Filter by author dark-sarge opened on Sep 24, 2026
  3

  

• [contract] - Both contracts duplicate ContractError enum risking discriminant version drift

  contractrefactorStellar Wave
  arflexx/Airflex#243 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [contract] - Escrow contract has no view function to enumerate all sub-escrows for a given trade

  contractenhancementStellar Wave
  arflexx/Airflex#242 · Filter by author dark-sarge opened on Sep 24, 2026
  3

  

• [contract] - Marketplace get_reputation returns a zero struct for unknown addresses with no way to distinguish no-history from new-user

  contractenhancementStellar Wave
  arflexx/Airflex#241 · Filter by author dark-sarge opened on Sep 24, 2026

• [contract] - flag_dispute in escrow allows disputes on PartiallyFilled trades before delivery is attempted

  bugcontractStellar Wave
  arflexx/Airflex#240 · Filter by author dark-sarge opened on Sep 24, 2026
  1

• [contract] - Escrow TTL extension only happens at initialize; trade entries may expire for long-running trades

  bugcontractStellar Wave
  arflexx/Airflex#239 · Filter by author dark-sarge opened on Sep 24, 2026
  4