Issues

• get_claim_history and get_storage_size are missing from learn-token unit tests

  lowrustStellar Wavetests
  ChainLearnOfficial/chainlearn-contracts#505 · Filter by author DeFiVC opened on Sep 30, 2026
  15

• create_proposal does not validate snapshot_ledger is in the past

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#504 · Filter by author DeFiVC opened on Sep 30, 2026
  11

• execute_proposal succeeds with zero votes -- no quorum or minimum vote check

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#503 · Filter by author DeFiVC opened on Sep 30, 2026
  13

• batch_claim_reward does not append claim records to history -- get_claim_history is incomplete

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#502 · Filter by author DeFiVC opened on Sep 30, 2026
  9

• increase_allowance can overflow when adding to existing allowance

  bugmediumrustsecurityStellar Wave
  ChainLearnOfficial/chainlearn-contracts#501 · Filter by author DeFiVC opened on Sep 30, 2026
  12

• Multiple learn-token admin and configuration functions bypass pause state check

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#500 · Filter by author DeFiVC opened on Sep 30, 2026
  12

• create_vesting bypasses pause state check in learn-token

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#499 · Filter by author DeFiVC opened on Sep 30, 2026
  14

• vote, create_proposal, and execute_proposal bypass pause state check in learn-token

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#498 · Filter by author DeFiVC opened on Sep 30, 2026
  10

• batch_claim_reward bypasses pause check while claim_reward checks it

  bughighrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#497 · Filter by author DeFiVC opened on Sep 30, 2026
  10

• No authorization tests for progress-tracker admin functions (create_course, archive_course, set_prerequisites, etc.)

  mediumrustStellar Wavetests
  ChainLearnOfficial/chainlearn-contracts#495 · Filter by author DeFiVC opened on Sep 30, 2026
  6

• Gas benchmark assertions are trivially true (assert!(cost > 0)) -- no regression protection

  lowrustStellar Wavetests
  ChainLearnOfficial/chainlearn-contracts#494 · Filter by author DeFiVC opened on Sep 30, 2026
  6

• test_contract_upgrade never actually calls upgrade() -- test verifies only initial state

  mediumrustStellar Wavetests
  ChainLearnOfficial/chainlearn-contracts#493 · Filter by author DeFiVC opened on Sep 30, 2026
  9

• revoke_delegation is blocked during pause, preventing learners from revoking malicious delegates

  bugmediumrustsecurityStellar Wave
  ChainLearnOfficial/chainlearn-contracts#492 · Filter by author DeFiVC opened on Sep 30, 2026
  7

• enroll_checked is pub and bypasses require_not_paused, allowing enrollment during emergency pause

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#491 · Filter by author DeFiVC opened on Sep 30, 2026
  5

• Upgrade guide Option C suggests deploy.sh which refuses to run if deployment file exists

  documentationlowStellar Wave
  ChainLearnOfficial/chainlearn-contracts#488 · Filter by author DeFiVC opened on Sep 30, 2026
  10

• SECURITY.md audit scope line counts are significantly understated

  documentationlowStellar Wave
  ChainLearnOfficial/chainlearn-contracts#487 · Filter by author DeFiVC opened on Sep 30, 2026
  8

• update_course_version and transfer_admin bypass write_entry, corrupting storage size counter

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#486 · Filter by author DeFiVC opened on Sep 30, 2026
  5

• snapshot() only emits event but does not record any balance data

  bughighrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#485 · Filter by author DeFiVC opened on Sep 30, 2026
  8

• Integration guide uses non-existent Soroban SDK API (env.events().subscribe)

  documentationlowStellar Wave
  ChainLearnOfficial/chainlearn-contracts#484 · Filter by author DeFiVC opened on Sep 30, 2026
  5

• README claims TOKEN_DECIMALS constant exists in shared package but it does not

  documentationlowStellar Wave
  ChainLearnOfficial/chainlearn-contracts#483 · Filter by author DeFiVC opened on Sep 30, 2026
  11

• progress-tracker admin course configuration functions skip require_not_paused

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#482 · Filter by author DeFiVC opened on Sep 30, 2026
  8

• Example files will not compile or run -- broken imports and APIs

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#481 · Filter by author DeFiVC opened on Sep 30, 2026
  7

• README API table has wrong function signatures and missing auth for execute_proposal

  documentationmediumStellar Wave
  ChainLearnOfficial/chainlearn-contracts#480 · Filter by author DeFiVC opened on Sep 30, 2026
  10

• Nine ContractError variants in learn-token are defined but never used

  enhancementlowrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#478 · Filter by author DeFiVC opened on Sep 30, 2026
  8

• scripts/upgrade.sh JSON validation is unreachable due to set -e

  bugmediumrustStellar Wave
  ChainLearnOfficial/chainlearn-contracts#477 · Filter by author DeFiVC opened on Sep 30, 2026
  9