Issues

• e2e cannot restart a zetaclient, so cold-start paths are untestable end to end

  zeta-chain/node#4625 · Filter by author kingpinXD opened on Aug 14, 2026

• Re-enable TSS key rotation in zetaclient

  zeta-chain/node#4623 · Filter by author kingpinXD opened on Aug 13, 2026

• Observer set change halts all inbound until a manual governance tx

  zeta-chain/node#4622 · Filter by author kingpinXD opened on Aug 13, 2026

• Backport workflow-hardening fix (unpinned-uses) to 4 release branches

  zeta-chain/node#4610 · Filter by author CharlieMCY opened on Jun 29, 2026

• eth_sign and eth_signTypedData bypass AllowInsecureUnlock JSON-RPC gate

  bug_bountyzetacore
  zeta-chain/node#4607 · Filter by author kingpinXD opened on May 26, 2026

• GetAbortedAmount fallback mints unbacked ZRC20 when V2 revert outbound has zero amount

  bug_bountyzetacore
  zeta-chain/node#4606 · Filter by author kingpinXD opened on May 25, 2026

• Solana observer drops same-type gateway deposits after the first in a single tx

  bug_bountysolanazetaclient
  zeta-chain/node#4605 · Filter by author kingpinXD opened on May 25, 2026

• Solana outbound TSS preimage missing writable-flag binding and length prefixes (ZCNode-267 + ZCNode-269)

  bug_bountyzetaclient
  zeta-chain/node#4604 · Filter by author kingpinXD opened on May 25, 2026

• Bitcoin inscription override uses wrong Vin index, forges MsgVoteInbound.Sender

  bug_bountyzetaclient
  zeta-chain/node#4603 · Filter by author kingpinXD opened on May 25, 2026

• MsgUpdateOperationalChainParams missing range validation can panic zetaclient outbound scheduler

  bug_bountyzetacore
  zeta-chain/node#4602 · Filter by author kingpinXD opened on May 25, 2026

• ZRC20 default liquidity cap miscomputed (decimals vs 10^decimals)

  bug_bountyzetacore
  zeta-chain/node#4601 · Filter by author kingpinXD opened on May 25, 2026

• Legacy V1 ZetaSent reverts trap WZETA on ConnectorZEVM

  bug_bountyzetacore
  zeta-chain/node#4600 · Filter by author kingpinXD opened on May 25, 2026

• Carry event-paid gasFee from GatewayZEVM V2 events into CCTX as refund cap

  bug_bountyzetacore
  zeta-chain/node#4586 · Filter by author kingpinXD opened on May 13, 2026
  1

• V2 GatewayZEVM inbound getZRC20InboundDetails does not check ForeignCoins.Paused

  bug_bountyzetacore
  zeta-chain/node#4585 · Filter by author kingpinXD opened on May 13, 2026

• Sui inbound observer rejects valid Gateway events with EventIndex != 0 and advances cursor past them

  securityzetaclient
  zeta-chain/node#4584 · Filter by author kingpinXD opened on May 4, 2026
  1

• Forward-port CometBFT v0.38.21 bump to main, develop, and tag a new release

  bug_bountysecurityzetacore
  zeta-chain/node#4583 · Filter by author kingpinXD opened on May 4, 2026

• zetaclient: telemetry /pingrtt crashes process via concurrent map access

  bug_bountyzetaclient
  zeta-chain/node#4582 · Filter by author kingpinXD opened on May 4, 2026

• fix: broaden Sui signer cancel fallback to handle all withdrawAndCall build errors

  bug_bountyzetaclient
  zeta-chain/node#4578 · Filter by author kingpinXD opened on Apr 28, 2026

• Add uint64 bounds check before Amount.Uint64() in chain signers

  bug_bounty
  zeta-chain/node#4577 · Filter by author kingpinXD opened on Apr 28, 2026

• fix: v1 outbound parsers abort on forged same-signature logs instead of continuing

  zeta-chain/node#4573 · Filter by author bit2swaz opened on Apr 23, 2026

• fix: cap pagination limit on observer Ballots query to prevent memory DoS

  bug_bountyzetacore
  zeta-chain/node#4568 · Filter by author kingpinXD opened on Apr 16, 2026

• fix: parseAndCheck functions in v2_outbound.go abort on forged log instead of continuing

  bug_bountyzetaclient
  zeta-chain/node#4567 · Filter by author kingpinXD opened on Apr 16, 2026

• fix: V2 GatewayEVM emits user-supplied amount instead of balance delta for fee-on-transfer tokens

  bug_bounty
  zeta-chain/node#4566 · Filter by author kingpinXD opened on Apr 16, 2026

• fix: add slippage protection to gas payment Uniswap swaps

  bug_bounty
  zeta-chain/node#4565 · Filter by author kingpinXD opened on Apr 10, 2026

• fix: add uint64 overflow guard in GetRevertGasLimit

  bug_bounty
  zeta-chain/node#4564 · Filter by author kingpinXD opened on Apr 7, 2026