Issues

No reproducible-build / supply-chain verification — deployed testnet WASM hash cannot be independently confirmed against published source
MergeFi/contracts#59 · opened on Aug 16, 2026
2
All three contracts: fee_bps is read fresh at payout time, not snapshotted at deposit — #20's mutable-fee design would enable retroactive fee changes
MergeFi/contracts#53 · opened on Aug 16, 2026
2
milestones::allocate: issue_id uniqueness is only enforced within a single milestone_id — the same GitHub issue can be paid out from multiple milestones
MergeFi/contracts#51 · opened on Aug 16, 2026
4
escrow: dead NotExpired/InsufficientBalance error variants suggest a missing defensive balance check in release()/refund()
MergeFi/contracts#48 · opened on Aug 16, 2026
2
All three contracts: fee_bps has no sanity ceiling below 10000 (100%) — a valid-but-predatory full-fee config silently zeros every payout
MergeFi/contracts#40 · opened on Aug 16, 2026
2
Migrate initialize to a Soroban constructor to close the deploy/init front-running race
MergeFi/contracts#33 · opened on Jul 20, 2026
9
Build a Soroban instruction/resource-budget regression benchmark suite for all entrypoints
MergeFi/contracts#23 · opened on Jul 15, 2026
4
Unvalidated deadline in escrow::fund — analyze and guard against degenerate/past-dated deadlines
MergeFi/contracts#21 · opened on Jul 15, 2026
4
Extract compute_split into a shared crate with proof of behavioral equivalence
MergeFi/contracts#16 · opened on Jul 15, 2026
8
Fixed TTL extension thresholds risk archival/fund-inaccessibility for long-lived escrows and pools
MergeFi/contracts#11 · opened on Jul 15, 2026
9
Maintenance-pool deposit() allows pool-id squatting via TokenMismatch griefing
MergeFi/contracts#2 · opened on Jul 15, 2026
4
Escrow fund() allows issue-id griefing via front-running before the legitimate sponsor funds
MergeFi/contracts#1 · opened on Jul 15, 2026
5