Issues

• Align Admin Auth and Error Handling on Borrow-Cap Route Using requireApiAdmin

  backendpriority: lowsecurityStellar Waveuser: admin
  thisisouvik/trustlend-stellar#351 · Filter by author sauravs296 opened on Oct 6, 2026

• Prevent Double-Withdrawal Race Condition with Pre-Payout State Transition and Row Locking

  backendpriority: highsecurityStellar Wave
  thisisouvik/trustlend-stellar#350 · Filter by author sauravs296 opened on Oct 6, 2026
  1

• Prevent 1:1 Face Value Fallback for Whitelisted Collateral Without Oracle Prices

  priority: mediumsecuritysmart contractsStellar Wave
  thisisouvik/trustlend-stellar#349 · Filter by author sauravs296 opened on Oct 6, 2026

• Validate On-Chain Loan Rate and Max Amount Against Borrower Reputation

  backendpriority: mediumsecuritysmart contractsStellar Wave
  thisisouvik/trustlend-stellar#348 · Filter by author sauravs296 opened on Oct 6, 2026

• Fail Closed on Missing SUMSUB_WEBHOOK_SECRET in Production KYC Webhook Handler

  backendpriority: highsecurityStellar Wave
  thisisouvik/trustlend-stellar#347 · Filter by author sauravs296 opened on Oct 6, 2026
  1

• Enforce Anchor Verification in sep31-deposit and Strict Webhook Signatures

  backendpriority: highsecurityStellar Wave
  thisisouvik/trustlend-stellar#346 · Filter by author sauravs296 opened on Oct 6, 2026

• Enforce Token Transfers in deposit_collateral and withdraw_collateral

  priority: highsecuritysmart contractsStellar Waveuser: borrower
  thisisouvik/trustlend-stellar#345 · Filter by author thisisouvik opened on Oct 5, 2026
  1

• Update Rust Cargo Dependencies for Soroban Contracts Security Advisories

  dependenciespriority: mediumsecuritysmart contractsStellar Wave
  thisisouvik/trustlend-stellar#344 · Filter by author thisisouvik opened on Oct 4, 2026

• Update Vulnerable npm Dependencies (Vitest, UUID, Esbuild, Brace-Expansion)

  dependenciespriority: mediumsecurityStellar Wave
  thisisouvik/trustlend-stellar#343 · Filter by author thisisouvik opened on Oct 4, 2026

• Upgrade Next.js to Patch Critical RCE in next/og ImageResponse (Dependabot #122)

  dependenciespriority: highsecurityStellar Wave
  thisisouvik/trustlend-stellar#342 · Filter by author thisisouvik opened on Oct 4, 2026

• Enforce Explicit Least-Privilege Permissions in GitHub Actions Workflows (CodeQL #8, #9)

  ci/cdpriority: lowsecurityStellar Wave
  thisisouvik/trustlend-stellar#341 · Filter by author thisisouvik opened on Oct 4, 2026

• Eliminate Externally-Controlled Format Strings in Logging Handlers (CodeQL #10, #11, #12, #14)

  backendpriority: mediumsecurityStellar Wave
  thisisouvik/trustlend-stellar#340 · Filter by author thisisouvik opened on Oct 4, 2026
  1

• Sanitize and Validate Address Parameter in Horizon API Fetch (CodeQL #13)

  backendpriority: highsecurityStellar Wave
  thisisouvik/trustlend-stellar#339 · Filter by author thisisouvik opened on Oct 4, 2026

• Implement Token Transfer and Access Control for Protocol Fee Collection

  priority: lowsecuritysmart contractsStellar Waveuser: admin
  thisisouvik/trustlend-stellar#338 · Filter by author thisisouvik opened on Oct 4, 2026
  1

• Address Unbacked Yield Accrual and Withdrawal Invariants in usdc_lending_pool

  bugpriority: mediumsmart contractsStellar Wave
  thisisouvik/trustlend-stellar#337 · Filter by author thisisouvik opened on Oct 4, 2026

• Implement Cryptographic Verification in zk_credit_verifier

  priority: mediumsecuritysmart contractsStellar Wave
  thisisouvik/trustlend-stellar#336 · Filter by author thisisouvik opened on Oct 4, 2026

• Validate Reputation Tier and Credit Limits On-Chain in Lending Contract

  priority: highsecuritysmart contractsStellar Waveuser: borrower
  thisisouvik/trustlend-stellar#335 · Filter by author thisisouvik opened on Oct 4, 2026

• Prevent Vault Asset Drain via Unverified Yield in auto_compound_vault::harvest

  priority: highsecuritysmart contractsStellar Wave
  thisisouvik/trustlend-stellar#334 · Filter by author thisisouvik opened on Oct 4, 2026

• Implement Interactive Lender Utilization Chart on Dashboard

  enhancementfeaturefrontendpriority: mediumStellar Waveui/uxuser: lender
  thisisouvik/trustlend-stellar#333 · Filter by author thisisouvik opened on Oct 4, 2026

• Fix Hardcoded User Display Limit on Admin Dashboard

  bugfrontendpriority: mediumStellar Waveui/uxuser: admin
  thisisouvik/trustlend-stellar#332 · Filter by author thisisouvik opened on Oct 4, 2026

• Enforce Fail-Closed Authentication for Scheduled Cron Endpoints

  backendpriority: highsecurityStellar Waveuser: admin
  thisisouvik/trustlend-stellar#331 · Filter by author thisisouvik opened on Oct 4, 2026

• Enforce Authentication and Validation on Fee Sponsorship Route

  backendpriority: highsecurityStellar Waveuser: borrower
  thisisouvik/trustlend-stellar#330 · Filter by author thisisouvik opened on Oct 4, 2026