-
Notifications
You must be signed in to change notification settings - Fork 41
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
Full WCAG 2.1 AA accessibility audit and remediation for all interactive dashboard and transaction views
frontendFrontend (Next.js/React)Frontend (Next.js/React)GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Status: Open.#147 In Afro-Pay/AfroPay-Stellar;walletStore error state is never cleared between actions and offers no per-operation error context to UI consumers
frontendFrontend (Next.js/React)Frontend (Next.js/React)GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Status: Open.#144 In Afro-Pay/AfroPay-Stellar;Design and implement a zero-downtime Prisma migration strategy for the Transaction table using the expand-contract pattern
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Status: Open.#142 In Afro-Pay/AfroPay-Stellar;POST /transactions/send is not idempotent — network retries and BullMQ re-enqueues can cause double-spend on the same transfer
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity related issueSecurity related issueStatus: Open.#140 In Afro-Pay/AfroPay-Stellar;KycService.getDailySpent sums raw transaction amounts without currency normalisation, allowing KYC tier limits to be bypassed via low-value assets
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity related issueSecurity related issueStatus: Open.#138 In Afro-Pay/AfroPay-Stellar;AnchorService passes raw SEP-6 anchor responses to callers with no schema validation or amount/account reconciliation
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity related issueSecurity related issueStatus: Open.#137 In Afro-Pay/AfroPay-Stellar;Python analytics risk scores are never written back to Transaction.riskScore in PostgreSQL — fraud flagging is a no-op
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Status: Open.#136 In Afro-Pay/AfroPay-Stellar;VaultService derives Stellar keypairs from SHA-256 hex strings — invalid key format, broken multi-sig, and insecure key derivation
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26securitySecurity related issueSecurity related issueStatus: Open.#134 In Afro-Pay/AfroPay-Stellar;fee-primitives Soroban contract: integer truncation in basis-point arithmetic causes zero-fee results for micro-transfers, bypassing min_fee
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Status: Open.#132 In Afro-Pay/AfroPay-Stellar;Rust worker: failed settlement jobs are silently dropped — no dead-letter queue, no PostgreSQL write-back
GrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Status: Open.#130 In Afro-Pay/AfroPay-Stellar;payment_registry contract: single-Map instance storage entry will hit Soroban's max ledger entry size under production load
bugSomething isn't workingSomething isn't workingGrantFox OSSIssue tracked in GrantFox OSSIssue tracked in GrantFox OSSMaybe RewardedIssue may be eligible for a GrantFox rewardIssue may be eligible for a GrantFox rewardOfficial Campaign | FWC26Campaign: Official Campaign | FWC26Campaign: Official Campaign | FWC26Status: Open.#129 In Afro-Pay/AfroPay-Stellar;Soroban Escrow: refund/release race condition at exact release_timestamp boundary is unanalysed and unguarded
securitySecurity related issueSecurity related issueStatus: Open.#128 In Afro-Pay/AfroPay-Stellar;