Issues

• [CRITICAL][migrate] initialize function is incomplete with orphaned .publish() call

  Stellar Wave
  dultimateade/hermes#289 · Filter by author dultimateade opened on Oct 14, 2026

• [CRITICAL][disputes] Contract has duplicate definitions and syntax errors — does not compile

  Stellar Wave
  dultimateade/hermes#288 · Filter by author dultimateade opened on Oct 14, 2026

• [CRITICAL][markets] withdraw_funds is a stub — amount is ignored, no transfer occurs

  Stellar Wave
  dultimateade/hermes#286 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [CRITICAL][markets] claim_winnings never transfers tokens — winnings permanently locked

  Stellar Wave
  dultimateade/hermes#285 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [HIGH][allowlist] add_addresses emits an event per address — can hit event emission limits for large batches

  Stellar Wave
  dultimateade/hermes#261 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [LOW][global] Missing deny(clippy::unwrap_used) and deny(clippy::expect_used) in contracts

  Stellar Wave
  dultimateade/hermes#258 · Filter by author dultimateade opened on Oct 14, 2026

• [LOW][markets] PauseProposal.reason field has no length limit — unbounded string stored on-chain

  Stellar Wave
  dultimateade/hermes#257 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [LOW][global] No CHANGELOG.md — 3700 commits with no structured release history

  Stellar Wave
  dultimateade/hermes#254 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [LOW][markets] version() returns hardcoded 7 — version should be derived from Cargo.toml

  Stellar Wave
  dultimateade/hermes#250 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [LOW][global] commit_and_push.ps1 and commit.sh committed — build scripts should not contain credentials

  Stellar Wave
  dultimateade/hermes#249 · Filter by author dultimateade opened on Oct 14, 2026
  2

  

• [LOW][global] Multiple large markdown files committed at repo root — should be in docs/

  Stellar Wave
  dultimateade/hermes#248 · Filter by author dultimateade opened on Oct 14, 2026
  3

  

• [LOW][global] full_structure3.txt (2.8MB) committed to repository — should be gitignored

  Stellar Wave
  dultimateade/hermes#247 · Filter by author dultimateade opened on Oct 14, 2026
  2

  

• [MEDIUM][predictify-hybrid] storage.rs is 61KB — persistent storage schema not documented

  Stellar Wave
  dultimateade/hermes#246 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][predictify-hybrid] monitoring.rs is 72KB — monitoring logic not integrated with monitor contract

  Stellar Wave
  dultimateade/hermes#245 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][global] hermes-errors crate README documents error codes but no validation that codes match implementation

  Stellar Wave
  dultimateade/hermes#242 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][reporting] delete_report has no check that the report exists before deletion

  Stellar Wave
  dultimateade/hermes#240 · Filter by author dultimateade opened on Oct 14, 2026
  2

  

• [MEDIUM][disputes] EscalationRecord not persisted — council votes are lost between transactions

  Stellar Wave
  dultimateade/hermes#238 · Filter by author dultimateade opened on Oct 14, 2026
  3

  

• [MEDIUM][validators] No validator enumeration endpoint — no way to list all validators

  Stellar Wave
  dultimateade/hermes#234 · Filter by author dultimateade opened on Oct 14, 2026
  2

  

• [MEDIUM][allowlist] list_allowlists returns all IDs with no pagination

  Stellar Wave
  dultimateade/hermes#233 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][oracles] list_oracles returns all oracles with no pagination — can hit response size limits

  Stellar Wave
  dultimateade/hermes#232 · Filter by author dultimateade opened on Oct 14, 2026
  2

• [MEDIUM][markets] No event emission for market lifecycle changes

  Stellar Wave
  dultimateade/hermes#231 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][global] No fuzz targets for markets, fees, admin, or allowlist contracts

  Stellar Wave
  dultimateade/hermes#230 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][global] CI workflow only runs on push to main — no PR checks

  Stellar Wave
  dultimateade/hermes#229 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][global] No SECURITY.md or vulnerability disclosure policy

  Stellar Wave
  dultimateade/hermes#228 · Filter by author dultimateade opened on Oct 14, 2026
  1

• [MEDIUM][global] Cargo.lock should be committed — reproducible builds not guaranteed

  Stellar Wave
  dultimateade/hermes#227 · Filter by author dultimateade opened on Oct 14, 2026
  1