Issues

• [Backend] profile_reports migration was edited in place after already being applied, instead of shipping a corrective migration

  backendbugdatabase
  OlaGreat/NovaSupport#1237 · Filter by author OlaGreat opened on Sep 25, 2026

• [Contract] No test exists for pause() being called by a non-admin

  contractgood first issuetesting
  OlaGreat/NovaSupport#1236 · Filter by author OlaGreat opened on Sep 25, 2026

• [Contract] estimate-gas.js still ships a hardcoded fallback Stellar secret key

  bugsecurity
  OlaGreat/NovaSupport#1235 · Filter by author OlaGreat opened on Sep 25, 2026

• [CI] contract-deploy.yml's "mainnet" workflow option is completely non-functional

  bugcicontract
  OlaGreat/NovaSupport#1234 · Filter by author OlaGreat opened on Sep 25, 2026

• [Frontend] Dashboard stat cards show hardcoded fake trend percentages

  bugdata-integrityfrontend
  OlaGreat/NovaSupport#1233 · Filter by author OlaGreat opened on Sep 25, 2026

• [Backend] Removing an accepted asset never touches existing recurring subscriptions pointed at it

  backendbugdata-integrity
  OlaGreat/NovaSupport#1232 · Filter by author OlaGreat opened on Sep 25, 2026

• [Contract] non_admin_cannot_unpause test doesn't test what it's named for, and no equivalent exists for pause()

  bugcontracttesting
  OlaGreat/NovaSupport#1228 · Filter by author OlaGreat opened on Sep 25, 2026

• [CI] Backend lint step still cannot fail regardless of how many violations exist

  backendbugci
  OlaGreat/NovaSupport#1227 · Filter by author OlaGreat opened on Sep 25, 2026

• [Backend] Profiles list total no longer matches what pagination can actually return for asset-filtered sort-by-popularity queries

  backendbugpagination
  OlaGreat/NovaSupport#1226 · Filter by author OlaGreat opened on Sep 25, 2026

• [Backend] Admin report-spam alert can be silently skipped under concurrent reports, and can never re-fire once passed

  backendbugrace-condition
  OlaGreat/NovaSupport#1225 · Filter by author OlaGreat opened on Sep 25, 2026

• [Backend] Circuit breaker's cross-instance coordination has a TOCTOU race — doesn't actually guarantee a single canary request

  backendbugconcurrency
  OlaGreat/NovaSupport#1224 · Filter by author OlaGreat opened on Sep 25, 2026

• [Backend] /.well-known/stellar.toml is now blocked by CORS for browser-based Stellar federation clients

  backendbugregression
  OlaGreat/NovaSupport#1223 · Filter by author OlaGreat opened on Sep 25, 2026

• [Frontend] Explore page's asset/issuer filter dropdowns self-narrow to whatever's currently filtered

  bugfrontendux
  OlaGreat/NovaSupport#1221 · Filter by author OlaGreat opened on Sep 25, 2026

• [Frontend] Public profile "Total Raised" can display an arbitrary, non-dominant asset

  backendbugdata-displayfrontend
  OlaGreat/NovaSupport#1220 · Filter by author OlaGreat opened on Sep 25, 2026