Issues

• Good First Issue Curation: Needs Review

  OpenLedger-Foundation/Kora-Contract#893 · Filter by author github-actions opened on Oct 5, 2026

• [Security] Scheduled dependency advisory findings

  OpenLedger-Foundation/Kora-Contract#892 · Filter by author github-actions opened on Oct 1, 2026
  2

• [High] Build Community Feedback Loop Tool for Protocol Improvement Proposals

  OpenLedger-Foundation/Kora-Contract#846 · Filter by author levi0005 opened on Sep 24, 2026

• [High] Implement Multi-Sig Council Rotation and Term-Limit Enforcement

  OpenLedger-Foundation/Kora-Contract#845 · Filter by author levi0005 opened on Sep 24, 2026

• [High] Build Onboarding Tutorial and Guided Tour for First-Time Users

  Stellar Wave
  OpenLedger-Foundation/Kora-Contract#790 · Filter by author levi0005 opened on Sep 24, 2026
  3

  

• [High] Build Debtor-Facing Invoice Confirmation Portal

  Stellar Wave
  OpenLedger-Foundation/Kora-Contract#788 · Filter by author levi0005 opened on Sep 24, 2026
  6

  

• [High] Implement Dark Mode and Theming System

  Stellar Wave
  OpenLedger-Foundation/Kora-Contract#787 · Filter by author levi0005 opened on Sep 24, 2026
  3

  

• [High] Build Yield Calculator and Return Projection Tool

  Stellar Wave
  OpenLedger-Foundation/Kora-Contract#786 · Filter by author levi0005 opened on Sep 24, 2026
  3

  

• marketplace::claim_refund moves tokens out of financing_pool's balance via a direct token.transfer(from=financing_pool, ...) call that would fail real Soroban authorization outside of mock_all_auths()

  OpenLedger-Foundation/Kora-Contract#524 · Filter by author OxDev-max opened on Jul 25, 2026

• SDK's InvoiceNftClient has no binding for mint_invoices_batch, set_listed, set_funded, set_repaid, or set_defaulted — the SDK cannot drive the batch-minting or status-transition flows the contract actually exposes

  OpenLedger-Foundation/Kora-Contract#523 · Filter by author OxDev-max opened on Jul 25, 2026

• .github/workflows/release.yml is still a do-nothing stub despite closed issue #254 claiming release tagging tied to WASM hashes was implemented

  OpenLedger-Foundation/Kora-Contract#522 · Filter by author OxDev-max opened on Jul 25, 2026

• financing_pool.mark_default's best-effort risk_registry.try_record_default() call silently swallows failures with no event or observability path

  OpenLedger-Foundation/Kora-Contract#521 · Filter by author OxDev-max opened on Jul 25, 2026

• SDK has no error-decoding layer mapping raw simulation/transaction failures to the KoraError enum

  OpenLedger-Foundation/Kora-Contract#520 · Filter by author OxDev-max opened on Jul 25, 2026

• SDK clients expose no initialize() bindings and PriceOracleClient/RiskRegistryClient.addVerifier are stale relative to the deployed contracts' real interfaces

  OpenLedger-Foundation/Kora-Contract#517 · Filter by author OxDev-max opened on Jul 25, 2026

• The sdk/ TypeScript package has zero automated test coverage and is completely absent from CI

  OpenLedger-Foundation/Kora-Contract#516 · Filter by author OxDev-max opened on Jul 25, 2026

• Numerous #[test] functions in financing_pool_edge_cases.rs and access_control_edge_cases.rs contain no contract calls or assertions, creating false coverage signal

  OpenLedger-Foundation/Kora-Contract#515 · Filter by author OxDev-max opened on Jul 25, 2026

• scripts/interact.sh's kora_add_verifier (and the demo.sh reference flow) calls the pre-staking 2-argument risk_registry.add_verifier instead of the required (admin, verifier, stake_amount) signature

  OpenLedger-Foundation/Kora-Contract#514 · Filter by author OxDev-max opened on Jul 25, 2026

• price_oracle is systematically omitted from build/release/monitoring tooling (Makefile, wasm-size.yml, record-wasm-hashes.sh, health-check.sh)

  OpenLedger-Foundation/Kora-Contract#513 · Filter by author OxDev-max opened on Jul 25, 2026

• scripts/deploy.sh deploys risk_registry twice and calls risk_registry/marketplace/price_oracle initialize() with argument lists that don't match their current signatures

  OpenLedger-Foundation/Kora-Contract#512 · Filter by author OxDev-max opened on Jul 25, 2026

• scripts/deploy.sh never calls invoice_nft.set_authorized_callers — every fresh deployment leaves marketplace/financing_pool unauthorized to transition invoice status

  OpenLedger-Foundation/Kora-Contract#511 · Filter by author OxDev-max opened on Jul 25, 2026

• price_oracle.convert() rejects any amount whose converted result rounds down to zero, rather than treating it as valid dust

  OpenLedger-Foundation/Kora-Contract#507 · Filter by author OxDev-max opened on Jul 25, 2026
  4