All issues

Clarify private security reporting channel and current bounty eligibility

#983

· 0monish opened

on Sep 17, 2026

[BUG BOUNTY] Per-user lending rate limits are bypassable by spoofing the unverified userAddress field

#982

· pierreneuville opened

on Sep 15, 2026

[BUG BOUNTY] Unauthenticated rate-limit admin endpoints allow global throttle manipulation and counter resets

#981

· pierreneuville opened

on Sep 15, 2026

[BUG BOUNTY] Unauthenticated emergency API allows arbitrary pause/resume of lending and bridge operations

#980

· pierreneuville opened

on Sep 15, 2026

[BUG BOUNTY] DcaModule: Execution Schedule Drift, Unvalidated Zero/Negative Funding, Arithmetic Overflows, and Storage List DoS

#971

· littfed opened

on Sep 13, 2026

[BUG BOUNTY] Risk-Scoring: Fatal Mathematical Score Deflation, Compilation Failure, and Pool Mismatch in Record

#969

· littfed opened

on Sep 13, 2026

[BUG BOUNTY] Compliance: Volume Manipulation via Negative Amounts, State Corruption on Rejected Tx, and Permanent Window Lockout

#967

· littfed opened

on Sep 13, 2026

[BUG BOUNTY] Stealth Address: Dual-Key Cryptographic Derivation Failure, Storage Overflow DoS, and Multi-Payment State Overwrites

#965

· littfed opened

on Sep 13, 2026

[BUG BOUNTY] ReputationSystem: Repeated Decay Griefing Attack, Quadratic Score Loss, and Negative Repayment Vulnerabilities

#962

· teddyvj opened

on Sep 13, 2026

[BUG BOUNTY] YieldRouter: Position Overwrite Loss, Cross-Asset Routing Contamination, and Risk Concentration Invariant Violation

#960

· teddyvj opened

on Sep 13, 2026

[BUG BOUNTY] EarningsReinvest: Zero-Earnings Schedule Griefing, Unchecked Gas Cost, Missing Target Validation, and Arithmetic Overflow Risks

#958

· teddyvj opened

on Sep 13, 2026

[BUG BOUNTY] CreditDelegation Negative Debt Erasure, Zero Repayment Line Termination, and Self-Delegation

#956

· teddyvj opened

on Sep 13, 2026