Issues

• Add a typed WalletError variant distinguishing a weak/low-entropy seed from a format failure

  area/contractdifficulty/mediumenhancement
  Octo-Protocol-org/Octo-Protocol#359 · Filter by author Emmyt24 opened on Sep 23, 2026
  5

• Document the sealed-seed scheme-versioning contract in docs/architecture.md

  area/contractdifficulty/mediumdocumentation
  Octo-Protocol-org/Octo-Protocol#358 · Filter by author Emmyt24 opened on Sep 23, 2026
  1

• Add signature-malleability regression tests for verify_account_signature

  area/contractarea/testingdifficulty/mediumenhancement
  Octo-Protocol-org/Octo-Protocol#357 · Filter by author Emmyt24 opened on Sep 23, 2026
  1

• Extract the repeated decrypt-derive-sign-zeroize sequence shared by sign_payment, sign_change_trust, and sign_fee_bump

  area/contractdifficulty/mediumenhancement
  Octo-Protocol-org/Octo-Protocol#356 · Filter by author Emmyt24 opened on Sep 23, 2026
  1

• Add cross-network AAD isolation tests for every sealed-seed operation, not just gas-tank provisioning

  area/contractarea/testingdifficulty/mediumenhancement
  Octo-Protocol-org/Octo-Protocol#355 · Filter by author Emmyt24 opened on Sep 23, 2026
  1

• feat(evm-rpc): Resilient JSON-RPC client for EVM chains

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedThird Campaigntype/epic
  Octo-Protocol-org/Octo-Protocol#218 · Filter by author Emmyt24 opened on Aug 23, 2026
  3

  

• feat(evm-core): secp256k1 keys, BIP-44 derivation, and EIP-55 addresses

  area/contractdifficulty/hardGrantFox OSSMaybe Rewardedrisk/security-sensitivestatus/needs-maintainer-reviewThird Campaigntype/epic
  Octo-Protocol-org/Octo-Protocol#217 · Filter by author Emmyt24 opened on Aug 23, 2026
  3

  

• feat(config): Per-chain configuration and runtime chain registry

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedThird Campaigntype/epic
  Octo-Protocol-org/Octo-Protocol#216 · Filter by author Emmyt24 opened on Aug 23, 2026
  3

  

• [HARD] Design and implement persistent brute-force lockout for authentication, beyond basic per-IP rate limiting

  area/integrationdifficulty/hard
  Octo-Protocol-org/Octo-Protocol#122 · Filter by author Emmyt24 opened on Jul 16, 2026
  2

• [HARD] Design and ship end-to-end SSRF hardening for outbound webhook delivery (redirects, DNS rebinding, IP-literal encodings)

  area/integrationdifficulty/hard
  Octo-Protocol-org/Octo-Protocol#121 · Filter by author Emmyt24 opened on Jul 16, 2026
  1

• feat(api): Add a GET /v1/wallets/:id/webhooks route to list registered endpoints (currently write-only)

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#115 · Filter by author Emmyt24 opened on Jul 16, 2026
  2

  

• feat(api): Add a pre-flight balance check against live Horizon balances before signing a withdrawal

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#108 · Filter by author Emmyt24 opened on Jul 16, 2026
  5

  

• feat(api): Add per-IP rate limiting middleware to /v1/auth/login and /v1/auth/signup

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#105 · Filter by author Emmyt24 opened on Jul 16, 2026
  4

  

• fix(webhooks): Close the SSRF gap where reqwest follows redirects into private address ranges

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#100 · Filter by author Emmyt24 opened on Jul 16, 2026
  3

• fix(ingest): Guard against muxed/memo id values exceeding i64::MAX instead of silently dropping attribution

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#99 · Filter by author Emmyt24 opened on Jul 16, 2026
  2

  

• feat(ingest): Add a quarantine-recovery path to re-attribute deposits after a late address registration

  area/backenddifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#98 · Filter by author Emmyt24 opened on Jul 16, 2026
  2

• test(ingest): amount::to_stroops adversarial decimal-string corpus (locale separators, scientific notation, overflow)

  area/testingdifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#61 · Filter by author Emmyt24 opened on Jul 16, 2026
  2

  

• test(store): Withdrawal status transition coverage including updates against nonexistent ids

  area/testingdifficulty/mediumGrantFox OSSMaybe RewardedOfficial Campaign | FWC26
  Octo-Protocol-org/Octo-Protocol#55 · Filter by author Emmyt24 opened on Jul 16, 2026
  

• feat(api): Extend audit logging for all gas sponsorship actions

  GrantFox OSSMaybe RewardedOfficial Campaign
  Octo-Protocol-org/Octo-Protocol#9 · Filter by author Emmyt24 opened on Jun 15, 2026
  4