Issues

• Admin role transfer has no two-step confirmation

  contractsenhancementpriority: mediumsecurity
  stellXpress/contracts#37 · Filter by author boluwacodes opened on Sep 3, 2026

• No integration tests running against a local/test network

  chorecontractspriority: lowtesting
  stellXpress/contracts#33 · Filter by author boluwacodes opened on Sep 3, 2026

• Escrow release conditions are not exhaustively covered by tests

  contractspriority: mediumtesting
  stellXpress/contracts#31 · Filter by author boluwacodes opened on Sep 3, 2026

• Fee calculation uses integer division that can round to zero

  bugcontractspriority: medium
  stellXpress/contracts#27 · Filter by author boluwacodes opened on Sep 3, 2026

• No emergency pause mechanism for critical functions

  contractsenhancementpriority: highsecurity
  stellXpress/contracts#25 · Filter by author boluwacodes opened on Sep 3, 2026

• Dispute/timelock window boundaries are off-by-one in edge cases

  bugcontractspriority: medium
  stellXpress/contracts#23 · Filter by author boluwacodes opened on Sep 3, 2026

• No fuzz testing on core state-transition functions

  contractspriority: mediumtesting
  stellXpress/contracts#21 · Filter by author boluwacodes opened on Sep 3, 2026

• Public interface functions lack doc comments

  contractsdocumentationgood first issuepriority: low
  stellXpress/contracts#19 · Filter by author boluwacodes opened on Sep 3, 2026

• No documented upgrade or migration path for contract state

  chorecontractsdocumentationpriority: low
  stellXpress/contracts#17 · Filter by author boluwacodes opened on Sep 3, 2026

• Public entrypoints do not validate input ranges

  bugcontractspriority: mediumsecurity
  stellXpress/contracts#15 · Filter by author boluwacodes opened on Sep 3, 2026

• Storage layout is not optimized, increasing per-call footprint cost

  contractsperformancepriority: low
  stellXpress/contracts#13 · Filter by author boluwacodes opened on Sep 3, 2026

• No reentrancy consideration documented for cross-contract calls

  contractspriority: highsecurity
  stellXpress/contracts#11 · Filter by author boluwacodes opened on Sep 3, 2026

• Error codes are generic and do not distinguish failure reasons

  chorecontractsenhancementpriority: low
  stellXpress/contracts#9 · Filter by author boluwacodes opened on Sep 3, 2026

• Edge cases around zero-amount and max-amount transfers are untested

  contractspriority: mediumtesting
  stellXpress/contracts#7 · Filter by author boluwacodes opened on Sep 3, 2026

• State-changing functions do not emit events

  contractsenhancementobservabilitypriority: medium
  stellXpress/contracts#5 · Filter by author boluwacodes opened on Sep 3, 2026

• Admin-only functions are missing explicit authorization checks

  bugcontractspriority: highsecurity
  stellXpress/contracts#3 · Filter by author boluwacodes opened on Sep 3, 2026

• Arithmetic operations lack explicit overflow/underflow checks

  bugcontractspriority: highsecurity
  stellXpress/contracts#1 · Filter by author boluwacodes opened on Sep 3, 2026