Issues

• token_bridge: per-holder WBAL entries never TTL-extended — a dormant wrapped-token balance risks archival and traps on read

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#55 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

  

• PaymentRecord's sequence counter is global, not per-sender, making the (from, seq) storage key non-contiguous despite its shape implying otherwise

  bugcontractsdocumentationGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#52 · Filter by author abayomicornelius opened on Aug 15, 2026
  3

  

• No test across any of the four contracts simulates Soroban persistent-storage TTL expiry

  contractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26testingThird Campaignvery hard
  StellarSend/contracts#51 · Filter by author abayomicornelius opened on Aug 15, 2026
  4

• send_payment and create_payment_request accept unbounded memo strings despite a doc comment recommending a 28-byte maximum

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#49 · Filter by author abayomicornelius opened on Aug 15, 2026
  3

  

• StellarSendError::InvalidFeeCollector is dead code — initialize() never validates the fee_collector address

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#47 · Filter by author abayomicornelius opened on Aug 15, 2026
  4

• execute_subscription reads fee_bps fresh from global config every execution — admin fee changes retroactively alter live subscriptions without payer re-consent

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26securityThird Campaignvery hard
  StellarSend/contracts#46 · Filter by author abayomicornelius opened on Aug 15, 2026
  4

• stellar_send: persistent Subscription records are never TTL-extended, risking archival for exactly the long-interval payments the feature exists to serve

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#43 · Filter by author abayomicornelius opened on Aug 15, 2026
  5

• fee_collector::collect_fee's obvious access-control fix would break its real caller — no allowlist primitive exists anywhere

  contractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26securityspikeThird Campaignvery hard
  StellarSend/contracts#42 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

• fee_collector::collect_fee has no reconciliation between claimed amounts and actual balance, and no invariant-check function exists

  contractsenhancementGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#41 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

  

• fee_collector has no way to rotate or recover the admin address — a lost key permanently locks withdraw and set_treasury

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26securityThird Campaignvery hard
  StellarSend/contracts#40 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

• fee_collector: persistent per-token totals are never TTL-extended, and get_total_collected silently masks archival as zero

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#39 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

  

• escrow::create_escrow lets beneficiary be set to a contract address that can never authorize its own claim

  bugcontractsdocumentationGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#38 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

  

• escrow::create_escrow has no maximum unlock_time ceiling — a fat-fingered timestamp can permanently lock funds

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26securityThird Campaignvery hard
  StellarSend/contracts#37 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

• escrow: the Locked→Released/Refunded cross-transition invariant has never been tested

  contractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26testingThird Campaignvery hard
  StellarSend/contracts#36 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

• escrow::create_escrow trusts the requested amount instead of measured balance — fee-on-transfer tokens can insolvency-cascade across pooled escrows

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26securityThird Campaignvery hard
  StellarSend/contracts#35 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

• escrow: persistent Escrow records are never TTL-extended, risking archival before release/refund

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26Third Campaignvery hard
  StellarSend/contracts#34 · Filter by author abayomicornelius opened on Aug 15, 2026
  2

• No contract upgrade or storage-migration strategy exists for any of the four contracts

  contractsenhancementGrantFox OSSMaybe RewardedOfficial Campaign | FWC26very hard
  StellarSend/contracts#31 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• No property-based/fuzz testing strategy exists for arithmetic-heavy contract functions

  GrantFox OSSMaybe RewardedOfficial Campaign | FWC26testingvery hard
  StellarSend/contracts#30 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• No cross-contract integration tests exist across fee_collector, stellar_send, token_bridge, and escrow

  GrantFox OSSMaybe RewardedOfficial Campaign | FWC26testingvery hard
  StellarSend/contracts#29 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• fee_collector::withdraw traps with an opaque token-contract error instead of a clean InsufficientBalance

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26very hard
  StellarSend/contracts#28 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• fee_collector::set_treasury emits no event and the treasury address isn't actually enforced by withdraw

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26very hard
  StellarSend/contracts#27 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• get_payment_record returns the misleading StellarSendError::NotInitialized for a simple not-found case

  bugcontractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26very hard
  StellarSend/contracts#26 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• execute_subscription permits unbounded rapid catch-up execution after keeper downtime

  contractsGrantFox OSSMaybe RewardedOfficial Campaign | FWC26securityvery hard
  StellarSend/contracts#24 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• escrow contract is completely undocumented — absent from README and architecture docs

  documentationGrantFox OSSMaybe RewardedOfficial Campaign | FWC26very hard
  StellarSend/contracts#22 · Filter by author abayomicornelius opened on Jul 15, 2026
  1

• escrow has no way to enumerate escrows by depositor or beneficiary

  documentationenhancementGrantFox OSSMaybe RewardedOfficial Campaign | FWC26very hard
  StellarSend/contracts#21 · Filter by author abayomicornelius opened on Jul 15, 2026
  1