-
Notifications
You must be signed in to change notification settings - Fork 34
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
parseCSV() silently drops rows with unparseable amounts and lets parseFloat silently truncate malformed numeric strings
apiREST API design and endpointsREST API design and endpointsbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#134 In SmartDropLabs/smartdrop-backend;X-Request-ID is trusted from the client with no validation — unbounded length/charset enables log bloat and correlation spoofing
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardobservabilityLogging, metrics, tracing, monitoringLogging, metrics, tracing, monitoringOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#133 In SmartDropLabs/smartdrop-backend;helmet()'s default Content-Security-Policy breaks the Swagger UI at /api-docs — no CSP exception configured for the docs route
bugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#129 In SmartDropLabs/smartdrop-backend;README-documented pool.* webhook events are never dispatched anywhere in the codebase — subscriptions are permanently, silently dead
bugSomething isn't workingSomething isn't workingdocumentationImprovements or additions to documentationImprovements or additions to documentationGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredwebhooksWebhook delivery and notificationWebhook delivery and notificationStatus: Open.#127 In SmartDropLabs/smartdrop-backend;Bootstrap ADMIN_API_KEY can never be revoked or rotated without a fleet-wide restart, and has no persisted audit trail
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#126 In SmartDropLabs/smartdrop-backend;WebSocket /ws endpoint has a global connection cap but no per-IP limit — bypasses all HTTP-layer rate limiting
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#125 In SmartDropLabs/smartdrop-backend;PriceSubscriptionManager's MAX_ASSETS_PER_CLIENT cap is enforced per-message, not cumulatively — repeated subscribe calls bypass the limit
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26performancePerformance improvementsPerformance improvementssecuritySecurity hardening and vulnerability fixesSecurity hardening and vulnerability fixesThird CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#124 In SmartDropLabs/smartdrop-backend;GET /health computes airdrop_expiry job health but never folds it into the aggregate status field — a dead reconciliation job is invisible to monitoring
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardobservabilityLogging, metrics, tracing, monitoringLogging, metrics, tracing, monitoringOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#123 In SmartDropLabs/smartdrop-backend;REST-managed airdrops and indexer-observed on-chain airdrops use disjoint ID namespaces with no linking field — on-chain claim status never reaches the REST API
apiREST API design and endpointsREST API design and endpointsbugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSindexingBlockchain indexing and event streamingBlockchain indexing and event streamingMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#122 In SmartDropLabs/smartdrop-backend;src/db/index.js and the Postgres migrations are entirely disconnected from the running application — dead infrastructure already drifted from the Redis-backed reality
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSinfrastructureDevOps, CI/CD, Docker, deploymentDevOps, CI/CD, Docker, deploymentMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#121 In SmartDropLabs/smartdrop-backend;priceRefresh has no cross-instance atomic guard during leader-election failover — split-brain window causes duplicate external calls and duplicate alert fires
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSinfrastructureDevOps, CI/CD, Docker, deploymentDevOps, CI/CD, Docker, deploymentMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#120 In SmartDropLabs/smartdrop-backend;leaderAwareJob.start()/stop() is not reentrant — repeated cycles permanently and cumulatively monkey-patch the shared leaderElection instance
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSinfrastructureDevOps, CI/CD, Docker, deploymentDevOps, CI/CD, Docker, deploymentMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial CampaignCampaign: Official CampaignCampaign: Official CampaignOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Third CampaignCampaign: Third CampaignCampaign: Third Campaignvery hardExtremely hard — deep expertise, careful design, and significant time requiredExtremely hard — deep expertise, careful design, and significant time requiredStatus: Open.#119 In SmartDropLabs/smartdrop-backend;