Multiple learn-token admin and configuration functions bypass pause state check

[DeFiVC]

What

Eight learn-token admin/configuration functions do not check require_not_paused:

1. set_transfer_restriction (lib.rs:211) -- can change transfer rules during pause
2. add_to_whitelist (lib.rs:227) -- can modify whitelist during pause
3. remove_from_whitelist (lib.rs:238) -- can modify whitelist during pause
4. snapshot (lib.rs:255) -- can create snapshots during pause
5. record_balance_snapshot (lib.rs:275) -- can record snapshots during pause
6. grant_role (lib.rs:858) -- can grant admin roles during pause
7. revoke_role (lib.rs:868) -- can revoke admin roles during pause
8. add_admin (lib.rs:880) -- can add admins during pause
9. remove_admin (lib.rs:893) -- can remove admins during pause
10. increase_allowance (lib.rs:1274) -- can modify allowances during pause

Why

During an emergency pause, an admin could:

• Change transfer restrictions to freeze all non-whitelisted holders
• Grant roles to compromised addresses
• Remove legitimate admins
• Modify allowances to prepare for attacks after unpause

The pause should freeze ALL state-changing operations, not just token transfers.

Scope

Add Self::require_not_paused(&env); to each function listed above, after the auth check.

Acceptance Criteria

• All listed functions panic when the contract is paused
• Tests verify they are blocked during pause

Technical Context

• contracts/learn-token/src/lib.rs -- all functions listed above

[Miraclechukwuemeka]

@Miraclechukwuemeka has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi maintainer, I would like to work on this issue. Kindly assign me

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Miraclechukwuemeka to this issue.

[Tinu-ola]

@Tinu-ola has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi, please assign me to this issue, please.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Tinu-ola to this issue.

[Obito-2222]

@Obito-2222 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi Maintainer,

I’m interested in taking ownership of this issue and would appreciate the opportunity to work on it if it is still available. I’ve carefully reviewed the issue requirements and have a clear understanding of the scope, expected outcome, and implementation approach.

I’m confident I can execute the task efficiently and deliver a clean, well-tested, and maintainable solution in accordance with the project’s standards and contribution guidelines. I’m also available to prioritize this issue and aim to have the implementation completed within 12 hours of being assigned.

If the issue is still unassigned, I’d be grateful if you could assign it to me. I’m ready to get stared immediately.

Thank you for your time and consideration.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Obito-2222 to this issue.

[2ndwave09]

@2ndwave09 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Please can I get this fixed? I am very good at what I do. I have read through and understand what needs to be done. I will ensure everything aligns perfectly with your existing contribution guidelines and standards.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @2ndwave09 to this issue.

[Luna-netty]

@Luna-netty has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi maintainer, I have read and understood the issue requirements and checked the necessary documentation. I’m confident I can work on this task effectively and deliver a proper solution.
Happy to discuss the approach first if that's useful before I start.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Luna-netty to this issue.

[samzeee2]

@samzeee2 has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hello Maintainer, I will be glad to work on this security fix. I’m comfortable with Rust, smart contracts, and testing, and can apply the pause guard consistently across the affected admin/configuration functions, preserve authorization checks, and add coverage confirming each operation is blocked while paused. Thank you for considering me.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @samzeee2 to this issue.

[favourgit]

@favourgit has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi maintainer, kindly assign this to me. I’ll add pause-state checks to all learn-token admin and configuration functions and verify them with focused tests. Thank you

ℹ️ Repo Maintainers: To accept this application, review their application or assign @favourgit to this issue.

[umarhussainiagaie-bot]

@umarhussainiagaie-bot has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hey maintainers assign this issue for me. I can handle this issue effectively

ℹ️ Repo Maintainers: To accept this application, review their application or assign @umarhussainiagaie-bot to this issue.

[TheHalalHunter]

@TheHalalHunter has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi maintainer
I’d love to help out with this issue. I’ve checked the current codebase/documentation and know exactly what needs to be updated to make this clearer. I will ensure everything aligns perfectly with your existing contribution guidelines.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @TheHalalHunter to this issue.

[LayanGift]

@LayanGift has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

I can handle this issue and will like to work on it, Please assign thank you.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @LayanGift to this issue.

[Richard-tobi]

@Richard-tobi has applied to work on this issue as part of the Stellar Wave Program's 9th wave.

Hi maintainer, please assign me this issue, can get it done asap

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Richard-tobi to this issue.