-
Notifications
You must be signed in to change notification settings - Fork 0
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
feat(eip-1271): the (v, r, s) parameters shut smart accounts out of every signature-funded operation
enhancementNew feature or requestNew feature or requestStatus: Open.feat(events): the four delta events don't name the token — an indexer starting late can't attribute the balances
enhancementNew feature or requestNew feature or requestperf-regressesFixing this COSTS performance — a deliberate trade-offFixing this COSTS performance — a deliberate trade-offStatus: Open.security(low): paymentId squatting — a mempool observer can block a merchant's authorize and force a buyer re-sign
confirmedTraced in the code: the defect is definitely presentTraced in the code: the defect is definitely presentsecurityVanta ReservedVanta Reservedsecurity-improvesFixing this STRENGTHENS securityFixing this STRENGTHENS securitysev-lowSeverity: low — correctness, docs or test debtSeverity: low — correctness, docs or test debtStatus: Open.docs(site): the landing page teaches the signature v1.4.0 rejects — flip it with the release, not before
confirmedTraced in the code: the defect is definitely presentTraced in the code: the defect is definitely presentdocumentationImprovements or additions to documentationImprovements or additions to documentationsev-lowSeverity: low — correctness, docs or test debtSeverity: low — correctness, docs or test debtStatus: Open.docs(low): the three nonce views still tell integrators to sign TransferWithAuthorization
confirmedTraced in the code: the defect is definitely presentTraced in the code: the defect is definitely presentdocumentationImprovements or additions to documentationImprovements or additions to documentationsev-lowSeverity: low — correctness, docs or test debtSeverity: low — correctness, docs or test debtStatus: Open.maintenance(low): foundry.toml chain config drifted from the deployment set; floating pragma on a deployed contract
securityVanta ReservedVanta Reservedsecurity-improvesFixing this STRENGTHENS securityFixing this STRENGTHENS securityStatus: Open.bug(low): authorizationExpiry == refundExpiry is accepted — collapses the refund/dispute window to zero
securityVanta ReservedVanta Reservedsecurity-improvesFixing this STRENGTHENS securityFixing this STRENGTHENS securityStatus: Open.security(high): refund nonce derives from refundableAmount — nonce collision permanently bricks refunds
perf-regressesFixing this COSTS performance — a deliberate trade-offFixing this COSTS performance — a deliberate trade-offperformanceAffects performance, positively or negatively (latency, load, gas, queries, bundle size)Affects performance, positively or negatively (latency, load, gas, queries, bundle size)securityVanta ReservedVanta Reservedsecurity-improvesFixing this STRENGTHENS securityFixing this STRENGTHENS securityStatus: Open.security(high): authorize/charge use transferWithAuthorization — front-runnable, buyer funds permanently lost
securityVanta ReservedVanta Reservedsecurity-improvesFixing this STRENGTHENS securityFixing this STRENGTHENS securityStatus: Open.